level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="793.925µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="45.592µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="867.428µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.58µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=94.4635ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="10.1µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="16.79µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="51.821µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="60.442µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="70.732µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="407.913µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.831µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.486225ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.085828ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="38.341µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="44.112µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="490.636µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="98.653µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="70.962µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=44.065889ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="84.383µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.891µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.116.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.891229ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.97µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.699448ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.77µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.479226ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.98µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.71µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="21.711µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.021µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="44.581µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="328.67µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.23µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.521µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="235.907µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="880.168µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.394564ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.8µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="23.73µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.116 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.116 ipAddr.ipv6="" k8sNodeIP=199.204.45.116 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.116" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.170" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.116" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.116} {CiliumInternalIP 10.0.0.170}] 10.0.0.0/24 [] [] 10.0.0.140 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:38759" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.640032889s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="22.25µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="19.27µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="65.362µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="4.98µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.71894236s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=319.339051ms file-path=/var/run/cilium/state/templates/ad4122ee9796a2bc18f8ecf8bd55870a2d42497d9707ab36d3d856ce7976bd2f/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.171 997fcde2-6cc0-4475-9eee-aa3622cd206c default }" containerID=6711559a45d7540ba41a03e122a2c42ecc1960b0e6a1d5579215a9e52d3d52fa datapathConfiguration="&{false false false false false }" interface=lxc43cf17ad8720 k8sPodName=kube-system/coredns-7c96b6546b-jtlh9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6711559a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 ipv4=10.0.0.171 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jtlh9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6711559a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.171 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jtlh9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.103 f56fbcb1-0cf3-4d47-8339-72d9c548304c default }" containerID=be86ab0b89ef81614806edb8e96d65d11f87e2f7408329a77e31b86142012491 datapathConfiguration="&{false false false false false }" interface=lxc82e08b63af2d k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fb97q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be86ab0b89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 ipv4=10.0.0.103 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fb97q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be86ab0b89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=d98471c3-8a29-43d1-a7dc-54ed79baaf0f,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=d98471c3-8a29-43d1-a7dc-54ed79baaf0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.103 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fb97q subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6711559a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identity=13660 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.171 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jtlh9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6711559a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identity=13660 ipv4=10.0.0.171 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jtlh9 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=be86ab0b89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.103 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fb97q line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=d98471c3-8a29-43d1-a7dc-54ed79baaf0f;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=d98471c3-8a29-43d1-a7dc-54ed79baaf0f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be86ab0b89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=6453 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=d98471c3-8a29-43d1-a7dc-54ed79baaf0f,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=d98471c3-8a29-43d1-a7dc-54ed79baaf0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.103 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fb97q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be86ab0b89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=6453 ipv4=10.0.0.103 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fb97q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1641 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 ipv4=10.0.0.140 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identityLabels="reserved:health" ipv4=10.0.0.140 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=4 identityLabels="reserved:health" ipv4=10.0.0.140 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.064575697s file-path=/var/run/cilium/state/templates/02f712325328e161f45566aed22f04b1f729b2cc1bbda4326746287a98a6ec80/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=512 identity=4 ipv4=10.0.0.140 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be86ab0b89 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1456 identity=6453 ipv4=10.0.0.103 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fb97q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6711559a45 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=90 identity=13660 ipv4=10.0.0.171 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jtlh9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=be86ab0b89 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1456 identity=6453 ipv4=10.0.0.103 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fb97q subsys=daemon level=info msg="Successful endpoint creation" containerID=6711559a45 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=90 identity=13660 ipv4=10.0.0.171 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jtlh9 subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be86ab0b89 endpointID=1456 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-fb97q subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=d98471c3-8a29-43d1-a7dc-54ed79baaf0f k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=d98471c3-8a29-43d1-a7dc-54ed79baaf0f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=be86ab0b89 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1456 identity=6453 ipv4=10.0.0.103 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fb97q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 a631847c-6341-4b08-91c2-daf7a79ad023 default }" containerID=26bdccf0b8b512270f298303223a1aea1ad8a5d74667994a51409bbfac23ed94 datapathConfiguration="&{false false false false false }" interface=lxc71f50169adb5 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-x2lsc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26bdccf0b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-x2lsc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26bdccf0b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-x2lsc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26bdccf0b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=7870 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-x2lsc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26bdccf0b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=7870 ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-x2lsc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26bdccf0b8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=859 identity=7870 ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-x2lsc subsys=endpoint level=info msg="Successful endpoint creation" containerID=26bdccf0b8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=859 identity=7870 ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-x2lsc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1641 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01641 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01641 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01641 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01641:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1641 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 db113077-d479-4619-b550-6697549255db default }" containerID=538706b5951740711f132014f80ac8effb04b1f10c9860e03d9e1591ab68afcc datapathConfiguration="&{false false false false false }" interface=lxcb135afa590a7 k8sPodName=kube-system/coredns-67659f764b-nw96v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=538706b595 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1926 ipv4=10.0.0.230 ipv6= k8sPodName=kube-system/coredns-67659f764b-nw96v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=538706b595 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1926 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.230 ipv6= k8sPodName=kube-system/coredns-67659f764b-nw96v subsys=endpoint level=info msg="Identity of endpoint changed" containerID=538706b595 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1926 identity=13660 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.230 ipv6= k8sPodName=kube-system/coredns-67659f764b-nw96v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=538706b595 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1926 identity=13660 ipv4=10.0.0.230 ipv6= k8sPodName=kube-system/coredns-67659f764b-nw96v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=538706b595 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1926 identity=13660 ipv4=10.0.0.230 ipv6= k8sPodName=kube-system/coredns-67659f764b-nw96v subsys=endpoint level=info msg="Successful endpoint creation" containerID=538706b595 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1926 identity=13660 ipv4=10.0.0.230 ipv6= k8sPodName=kube-system/coredns-67659f764b-nw96v subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.218 270b4b09-00c4-4002-81dd-de096d265a3b default }" containerID=24ad4a43d6f2f4fdfe11c26d1bbba0bb75ededcbbdf85a610249b49393800197 datapathConfiguration="&{false false false false false }" interface=lxcc52606872ae9 k8sPodName=kube-system/coredns-67659f764b-rbbr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24ad4a43d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3815 ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-rbbr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24ad4a43d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3815 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-rbbr6 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=24ad4a43d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3815 identity=13660 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-rbbr6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24ad4a43d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3815 identity=13660 ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-rbbr6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24ad4a43d6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3815 identity=13660 ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-rbbr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=24ad4a43d6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3815 identity=13660 ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-rbbr6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.40 c33c5606-e58d-4e7e-8cc2-5a59268f4468 default }" containerID=458e1b216c78cd260d4dcb455fd66e833ef4b1854b15ee9cdc371aeb06475f4f datapathConfiguration="&{false false false false false }" interface=lxcd8c8c928524c k8sPodName=local-path-storage/local-path-provisioner-679c578f5-856p4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=458e1b216c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-856p4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=458e1b216c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-856p4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=458e1b216c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-856p4 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=458e1b216c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 identity=12409 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-856p4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=458e1b216c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 identity=12409 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-856p4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=458e1b216c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2123 identity=12409 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-856p4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=458e1b216c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2123 identity=12409 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-856p4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6711559a45 endpointID=90 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-jtlh9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=6711559a45 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=90 identity=13660 ipv4=10.0.0.171 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jtlh9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 cada7215-7a47-47ec-8ffa-48ea79b6cc6b default }" containerID=76394b7f136c27869d907fae933f0c5e1c2302a63e826ea790282e9e5f3d8e62 datapathConfiguration="&{false false false false false }" interface=lxc3e82d8141d43 k8sPodName=cert-manager/cert-manager-75969b45cf-wqgjs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76394b7f13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-wqgjs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76394b7f13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-wqgjs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=76394b7f13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-wqgjs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76394b7f13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 identity=2189 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-wqgjs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76394b7f13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 identity=2189 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-wqgjs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76394b7f13 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1374 identity=2189 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-wqgjs subsys=endpoint level=info msg="Successful endpoint creation" containerID=76394b7f13 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1374 identity=2189 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-wqgjs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.94 abc5508e-95c3-4842-a8f4-816e36845762 default }" containerID=2dddc3575205df95f0a3f091fd268b064c875676019303d4e98997253f8797b4 datapathConfiguration="&{false false false false false }" interface=lxcba495577b07b k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-8t8gt labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.42 99643971-76bc-49eb-a0a7-0951cf3e3cb7 default }" containerID=23d53f1f413f89ee2fb83c7c268bab22015d8e8e3f9e219f5958ec95dd73734b datapathConfiguration="&{false false false false false }" interface=lxc314f7c5272e6 k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-p5frd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dddc35752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2590 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-8t8gt subsys=endpoint level=info msg="New endpoint" containerID=23d53f1f41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-p5frd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23d53f1f41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-p5frd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dddc35752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2590 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-8t8gt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=23d53f1f41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identity=10458 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-p5frd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23d53f1f41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identity=10458 ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-p5frd subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2dddc35752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2590 identity=32128 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-8t8gt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2dddc35752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2590 identity=32128 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-8t8gt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23d53f1f41 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=731 identity=10458 ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-p5frd subsys=endpoint level=info msg="Successful endpoint creation" containerID=23d53f1f41 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=731 identity=10458 ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-p5frd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2dddc35752 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2590 identity=32128 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-8t8gt subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dddc35752 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2590 identity=32128 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-8t8gt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.109 5d3394ff-5bb1-4385-986e-7dcff7ec14ae default }" containerID=5c0309e1a0bfebebeb32bad4233ef742e39859e8f32c1b948e7b39171caed4da datapathConfiguration="&{false false false false false }" interface=lxcf9911d973c01 k8sPodName=cert-manager/cert-manager-startupapicheck-fkt56 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c0309e1a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fkt56 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c0309e1a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=32eb8451-b11e-4771-b98e-9d9145e2b6bc,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=32eb8451-b11e-4771-b98e-9d9145e2b6bc,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fkt56 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=32eb8451-b11e-4771-b98e-9d9145e2b6bc;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=32eb8451-b11e-4771-b98e-9d9145e2b6bc;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c0309e1a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=32014 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=32eb8451-b11e-4771-b98e-9d9145e2b6bc,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=32eb8451-b11e-4771-b98e-9d9145e2b6bc,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fkt56 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c0309e1a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=32014 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fkt56 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c0309e1a0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=59 identity=32014 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fkt56 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c0309e1a0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=59 identity=32014 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fkt56 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5c0309e1a0 endpointID=59 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-fkt56 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=32eb8451-b11e-4771-b98e-9d9145e2b6bc k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=32eb8451-b11e-4771-b98e-9d9145e2b6bc k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=5c0309e1a0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=59 identity=32014 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fkt56 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 5719eed7-cc12-422e-930d-f51d38dd5e05 default }" containerID=bdd668c1e8f6b1588edfbfd457a170d844bdb443361ea2b65aee9a637488e555 datapathConfiguration="&{false false false false false }" interface=lxc96249d602378 k8sPodName=ingress-nginx/ingress-nginx-admission-create-t4vqs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bdd668c1e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 ipv4=10.0.0.131 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-t4vqs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bdd668c1e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=25ae8b3b-7c3a-47ba-b71d-29b3b38a36b4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=25ae8b3b-7c3a-47ba-b71d-29b3b38a36b4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.131 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-t4vqs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bdd668c1e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.131 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-t4vqs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=25ae8b3b-7c3a-47ba-b71d-29b3b38a36b4;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=25ae8b3b-7c3a-47ba-b71d-29b3b38a36b4;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bdd668c1e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=31837 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=25ae8b3b-7c3a-47ba-b71d-29b3b38a36b4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=25ae8b3b-7c3a-47ba-b71d-29b3b38a36b4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.131 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-t4vqs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bdd668c1e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=31837 ipv4=10.0.0.131 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-t4vqs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bdd668c1e8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=351 identity=31837 ipv4=10.0.0.131 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-t4vqs subsys=endpoint level=info msg="Successful endpoint creation" containerID=bdd668c1e8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=351 identity=31837 ipv4=10.0.0.131 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-t4vqs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bdd668c1e8 endpointID=351 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-t4vqs subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=25ae8b3b-7c3a-47ba-b71d-29b3b38a36b4 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=25ae8b3b-7c3a-47ba-b71d-29b3b38a36b4 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=bdd668c1e8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=351 identity=31837 ipv4=10.0.0.131 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-t4vqs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 024f9e54-2bce-4356-b791-7824c8fa64ab default }" containerID=b40af69562ee837f8cdd76cb742a699c6a8c2d0c7e85ea87a6b6a0d74da9084a datapathConfiguration="&{false false false false false }" interface=lxc2a61a94321a0 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gfrzq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b40af69562 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gfrzq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b40af69562 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gfrzq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b40af69562 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gfrzq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b40af69562 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identity=50828 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gfrzq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b40af69562 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3990 identity=50828 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gfrzq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b40af69562 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3990 identity=50828 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gfrzq subsys=endpoint level=info msg="Successful endpoint creation" containerID=b40af69562 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3990 identity=50828 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gfrzq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.177 cb371286-b465-49f2-9096-bd69df80b8f1 default }" containerID=654e368acdd308e5f721114985c1fbd67ea02a9cdb250e8e3ea3652188a2c38e datapathConfiguration="&{false false false false false }" interface=lxc6906c3fcf1a3 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-7jfrv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=654e368acd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 ipv4=10.0.0.177 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-7jfrv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=654e368acd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2b0fa6e9-1ae6-482a-b38b-cc2afa2e191e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2b0fa6e9-1ae6-482a-b38b-cc2afa2e191e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.177 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-7jfrv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=2b0fa6e9-1ae6-482a-b38b-cc2afa2e191e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=2b0fa6e9-1ae6-482a-b38b-cc2afa2e191e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=654e368acd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 identity=23346 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2b0fa6e9-1ae6-482a-b38b-cc2afa2e191e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2b0fa6e9-1ae6-482a-b38b-cc2afa2e191e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.177 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-7jfrv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=654e368acd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 identity=23346 ipv4=10.0.0.177 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-7jfrv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=654e368acd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1134 identity=23346 ipv4=10.0.0.177 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-7jfrv subsys=endpoint level=info msg="Successful endpoint creation" containerID=654e368acd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1134 identity=23346 ipv4=10.0.0.177 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-7jfrv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=654e368acd endpointID=1134 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-7jfrv subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=2b0fa6e9-1ae6-482a-b38b-cc2afa2e191e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=2b0fa6e9-1ae6-482a-b38b-cc2afa2e191e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=654e368acd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1134 identity=23346 ipv4=10.0.0.177 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-7jfrv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 96bab1e8-456c-4cda-af37-21297179c957 default }" containerID=c68f714c6122899979636eeb6008650e7cb65181c4a7b81e00b2017623331c0e datapathConfiguration="&{false false false false false }" interface=lxc5fd0d323c99b k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-7df9g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c68f714c61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-7df9g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c68f714c61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-7df9g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c68f714c61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=1298 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-7df9g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c68f714c61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=1298 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-7df9g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c68f714c61 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1549 identity=1298 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-7df9g subsys=endpoint level=info msg="Successful endpoint creation" containerID=c68f714c61 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1549 identity=1298 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-7df9g subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.88 3bad36e0-66a0-42cf-b716-850463bc78d8 default }" containerID=cb62d5c9c9b74f8a19fe20658744d04251c6ac5d4426996a957dc04f3e1c2aa5 datapathConfiguration="&{false false false false false }" interface=lxc71fb56ed22c0 k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-fdf6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb62d5c9c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-fdf6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb62d5c9c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-fdf6b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb62d5c9c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identity=19680 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-fdf6b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb62d5c9c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identity=19680 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-fdf6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb62d5c9c9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1070 identity=19680 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-fdf6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb62d5c9c9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1070 identity=19680 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-fdf6b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 bb3b9dd6-5b40-4024-b548-085379217369 default }" containerID=98aba5d6655ca00ac3f8d68d859c520649b649ce4f179497f1eb3792a67aab6b datapathConfiguration="&{false false false false false }" interface=lxcd8a423680ada k8sPodName=openstack/pxc-operator-59d66cbc78-68rhm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98aba5d665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-68rhm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98aba5d665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-68rhm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=98aba5d665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-68rhm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98aba5d665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identity=20878 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-68rhm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98aba5d665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identity=20878 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-68rhm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98aba5d665 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=687 identity=20878 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-68rhm subsys=endpoint level=info msg="Successful endpoint creation" containerID=98aba5d665 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=687 identity=20878 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-68rhm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.201 79c7ca46-49f0-4cb8-8de1-61b402606495 default }" containerID=c6be89ee3576676a1e5087d71169cebf6ca9bd9282fa55618ce0eb187a4180fb datapathConfiguration="&{false false false false false }" interface=lxc7046a1bd9940 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6be89ee35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6be89ee35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c6be89ee35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6be89ee35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 identity=24575 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6be89ee35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 identity=24575 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 e0e93ba9-2c31-4ae0-b026-9d8d72387072 default }" containerID=bc544206d92a7afce26855895df65030abc9826b70ecd2d4414a2c6c47ccf336 datapathConfiguration="&{false false false false false }" interface=lxc6646d673bc12 k8sPodName=local-path-storage/helper-pod-create-pvc-262a232c-8bea-48c8-b0ba-3c3563ee22fa labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc544206d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-262a232c-8bea-48c8-b0ba-3c3563ee22fa subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc544206d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-262a232c-8bea-48c8-b0ba-3c3563ee22fa subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc544206d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identity=19649 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-262a232c-8bea-48c8-b0ba-3c3563ee22fa oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc544206d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identity=19649 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-262a232c-8bea-48c8-b0ba-3c3563ee22fa subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6be89ee35 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1248 identity=24575 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6be89ee35 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1248 identity=24575 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bc544206d9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1839 identity=19649 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-262a232c-8bea-48c8-b0ba-3c3563ee22fa subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc544206d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1839 identity=19649 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-262a232c-8bea-48c8-b0ba-3c3563ee22fa subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bc544206d9 endpointID=1839 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-262a232c-8bea-48c8-b0ba-3c3563ee22fa subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bc544206d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1839 identity=19649 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-262a232c-8bea-48c8-b0ba-3c3563ee22fa subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 c53156cd-f950-421e-b25c-970291d129e6 default }" containerID=947002f3fe48632a5cf9cc9be53442533142026eb82e9a2fce037624cde81a05 datapathConfiguration="&{false false false false false }" interface=lxc7523cc0256e2 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=947002f3fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3416 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=947002f3fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3416 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=947002f3fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3416 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=947002f3fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3416 identity=20879 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=947002f3fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3416 identity=20879 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=947002f3fe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3416 identity=20879 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=947002f3fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3416 identity=20879 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.61 4fa5075e-6429-4615-a71a-e501ccac8189 default }" containerID=f3f493e12e722e4ded7808a586b9ebc8aa375bd9f0cb562e898f4bf1cb0671b8 datapathConfiguration="&{false false false false false }" interface=lxc9d0d3e68d82e k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3f493e12e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 ipv4=10.0.0.61 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3f493e12e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.61 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f3f493e12e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.61 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3f493e12e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 identity=33687 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.61 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3f493e12e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 identity=33687 ipv4=10.0.0.61 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f3f493e12e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3386 identity=33687 ipv4=10.0.0.61 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3f493e12e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3386 identity=33687 ipv4=10.0.0.61 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.167 0aebb888-017b-4f31-82c2-0ba1792fb7ef default }" containerID=a417acccdf9a6f1053fbc095d30cdcea8b536812f69c83891a8af681ae63da7d datapathConfiguration="&{false false false false false }" interface=lxcd7fb65ce4e08 k8sPodName=monitoring/node-feature-discovery-worker-fjwbl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a417acccdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fjwbl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a417acccdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fjwbl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a417acccdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fjwbl line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a417acccdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identity=18713 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fjwbl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a417acccdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identity=18713 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fjwbl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 0a43b506-aea6-4675-8cf6-4d1e1a287587 default }" containerID=2cc452fdc5bd68b4cdb09c37aba5ad1129232f7db6e24f9777739ea554117eb5 datapathConfiguration="&{false false false false false }" interface=lxc371b78e767c9 k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-drr8m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2cc452fdc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-drr8m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2cc452fdc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-drr8m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2cc452fdc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identity=6422 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-drr8m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2cc452fdc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identity=6422 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-drr8m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a417acccdf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1017 identity=18713 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fjwbl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a417acccdf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1017 identity=18713 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fjwbl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2cc452fdc5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=434 identity=6422 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-drr8m subsys=endpoint level=info msg="Successful endpoint creation" containerID=2cc452fdc5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=434 identity=6422 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-drr8m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.184 f9c6d1ee-f3d4-46f8-8088-90087129cfd9 default }" containerID=fd17b81d53ee7a90e261118f540ede111426c82ca3045b3dc9106863b5a92d87 datapathConfiguration="&{false false false false false }" interface=lxc97c558287b39 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-b8h4h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd17b81d53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3518 ipv4=10.0.0.184 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-b8h4h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd17b81d53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3518 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.184 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-b8h4h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd17b81d53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3518 identity=5052 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.184 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-b8h4h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd17b81d53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3518 identity=5052 ipv4=10.0.0.184 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-b8h4h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd17b81d53 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3518 identity=5052 ipv4=10.0.0.184 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-b8h4h subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd17b81d53 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3518 identity=5052 ipv4=10.0.0.184 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-b8h4h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1641 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SCE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01641 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01641 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01641 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01641:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1641 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.01283698783935504 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.53 42b3289f-137d-476f-88cd-e247e267d586 default }" containerID=7301314782d8d42dda82e888f5aaf2015c4f61bb37b8f7e49e3624471bb8d790 datapathConfiguration="&{false false false false false }" interface=lxca8ed51c8e2e7 k8sPodName=monitoring/kube-prometheus-stack-admission-create-92cmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7301314782 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-92cmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7301314782 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e639f236-982a-4203-bb97-fbd7fb970a05,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=e639f236-982a-4203-bb97-fbd7fb970a05,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-92cmc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=e639f236-982a-4203-bb97-fbd7fb970a05;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=e639f236-982a-4203-bb97-fbd7fb970a05;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7301314782 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 identity=22018 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e639f236-982a-4203-bb97-fbd7fb970a05,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=e639f236-982a-4203-bb97-fbd7fb970a05,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-92cmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7301314782 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 identity=22018 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-92cmc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7301314782 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2899 identity=22018 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-92cmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=7301314782 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2899 identity=22018 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-92cmc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7301314782 endpointID=2899 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-92cmc subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=e639f236-982a-4203-bb97-fbd7fb970a05 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=e639f236-982a-4203-bb97-fbd7fb970a05 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=7301314782 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2899 identity=22018 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-92cmc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 5c228274-733b-4768-80ac-f2a3a8ee0566 default }" containerID=637a92d6d9870ae8848bd9cd4f0ac17f3bdd2e4d68d18ef6f1842f64fd72e815 datapathConfiguration="&{false false false false false }" interface=lxc6925d0294d1b k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-ndz9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=637a92d6d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-ndz9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=637a92d6d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-ndz9d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=637a92d6d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-ndz9d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=637a92d6d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 identity=14655 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-ndz9d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=637a92d6d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1643 identity=14655 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-ndz9d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 d5d817ff-bdff-427a-9824-83239d7edad3 default }" containerID=3501736b4aabd29f9c45e1993cb81bcf9ec9a2a48a749c3f2c3806e44e05bc29 datapathConfiguration="&{false false false false false }" interface=lxcbac2ca7724e7 k8sPodName=monitoring/kube-prometheus-stack-grafana-544f484584-nc7jt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3501736b4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-544f484584-nc7jt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3501736b4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-544f484584-nc7jt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3501736b4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 identity=954 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-544f484584-nc7jt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3501736b4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 identity=954 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-544f484584-nc7jt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 c8b985e8-39a3-43a4-982b-fe8cb0f2be25 default }" containerID=4a5fa8052ddc9ec663d328b36631d92d7858e75be3e52a34fc5e85ee758796cb datapathConfiguration="&{false false false false false }" interface=lxc1cac78e4f073 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-dh8pj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a5fa8052d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-dh8pj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a5fa8052d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-dh8pj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a5fa8052d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 identity=29183 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-dh8pj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a5fa8052d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 identity=29183 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-dh8pj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=637a92d6d9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1643 identity=14655 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-ndz9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=637a92d6d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1643 identity=14655 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-ndz9d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3501736b4a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1220 identity=954 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-544f484584-nc7jt subsys=endpoint level=info msg="Successful endpoint creation" containerID=3501736b4a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1220 identity=954 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-544f484584-nc7jt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4a5fa8052d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2357 identity=29183 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-dh8pj subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a5fa8052d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2357 identity=29183 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-dh8pj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.163 1cd3d4dd-d0f2-4a27-ba5d-bd113f651bdc default }" containerID=f19693dbcf433a899499376ad9380dcefd17f3067801575ce57029e9e0402186 datapathConfiguration="&{false false false false false }" interface=lxcb28f4c2cf794 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xbz2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f19693dbcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xbz2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f19693dbcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=aa087ddf-8b25-492d-b2af-51837ec90461,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=aa087ddf-8b25-492d-b2af-51837ec90461,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xbz2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=aa087ddf-8b25-492d-b2af-51837ec90461;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=aa087ddf-8b25-492d-b2af-51837ec90461;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f19693dbcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identity=18352 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=aa087ddf-8b25-492d-b2af-51837ec90461,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=aa087ddf-8b25-492d-b2af-51837ec90461,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xbz2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f19693dbcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identity=18352 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xbz2d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f19693dbcf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2631 identity=18352 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xbz2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=f19693dbcf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2631 identity=18352 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xbz2d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 5dfedf9e-1ad9-4112-bb0c-c3eae0358dea default }" containerID=72f0429bd2ab358602f75717d39c12245aad53489710ef00ed43d4a5786cad7c datapathConfiguration="&{false false false false false }" interface=lxc481d58565e3c k8sPodName=local-path-storage/helper-pod-create-pvc-fe936d3a-a88b-43c4-9dcd-b71d356ec215 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72f0429bd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3722 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe936d3a-a88b-43c4-9dcd-b71d356ec215 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72f0429bd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3722 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe936d3a-a88b-43c4-9dcd-b71d356ec215 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72f0429bd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3722 identity=19649 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe936d3a-a88b-43c4-9dcd-b71d356ec215 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72f0429bd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3722 identity=19649 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe936d3a-a88b-43c4-9dcd-b71d356ec215 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=72f0429bd2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3722 identity=19649 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe936d3a-a88b-43c4-9dcd-b71d356ec215 subsys=endpoint level=info msg="Successful endpoint creation" containerID=72f0429bd2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3722 identity=19649 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe936d3a-a88b-43c4-9dcd-b71d356ec215 subsys=daemon level=info msg="Delete endpoint request" containerID=f19693dbcf endpointID=2631 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-xbz2d subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=aa087ddf-8b25-492d-b2af-51837ec90461 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=aa087ddf-8b25-492d-b2af-51837ec90461 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f19693dbcf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2631 identity=18352 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xbz2d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 3a85a706-e1bd-407f-998a-84f037863535 default }" containerID=b81fd09d20fa9eb21a6e8dda3c5c8e974c5a0461dfd5b84344cdf68e31f9c9d7 datapathConfiguration="&{false false false false false }" interface=lxc25a404e07e66 k8sPodName=local-path-storage/helper-pod-create-pvc-321c50cc-7e90-4cf1-9fd4-7b750ff2138e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b81fd09d20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-321c50cc-7e90-4cf1-9fd4-7b750ff2138e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b81fd09d20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-321c50cc-7e90-4cf1-9fd4-7b750ff2138e subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b81fd09d20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 identity=19649 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-321c50cc-7e90-4cf1-9fd4-7b750ff2138e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b81fd09d20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 identity=19649 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-321c50cc-7e90-4cf1-9fd4-7b750ff2138e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b81fd09d20 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2135 identity=19649 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-321c50cc-7e90-4cf1-9fd4-7b750ff2138e subsys=endpoint level=info msg="Successful endpoint creation" containerID=b81fd09d20 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2135 identity=19649 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-321c50cc-7e90-4cf1-9fd4-7b750ff2138e subsys=daemon level=info msg="Delete endpoint request" containerID=72f0429bd2 endpointID=3722 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fe936d3a-a88b-43c4-9dcd-b71d356ec215 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=72f0429bd2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3722 identity=19649 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe936d3a-a88b-43c4-9dcd-b71d356ec215 subsys=endpoint level=info msg="Delete endpoint request" containerID=b81fd09d20 endpointID=2135 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-321c50cc-7e90-4cf1-9fd4-7b750ff2138e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b81fd09d20 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2135 identity=19649 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-321c50cc-7e90-4cf1-9fd4-7b750ff2138e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 62b11be0-cf7f-43fa-a416-09e943ae1876 default }" containerID=67ed383dc8be50208f4712a030c623a8ac8ca15919ed2fe4b7dbab251e5fb5f9 datapathConfiguration="&{false false false false false }" interface=lxca02abfc200b5 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67ed383dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67ed383dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=67ed383dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67ed383dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 identity=1410 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67ed383dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 identity=1410 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67ed383dc8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2294 identity=1410 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=67ed383dc8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2294 identity=1410 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 1773cda9-e516-4353-9089-2e02af04179e default }" containerID=fdcb86519b55f528ab12b877cef6574ab7af67a7361e3e91b598a965f454d100 datapathConfiguration="&{false false false false false }" interface=lxcb142e7a71ce2 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdcb86519b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdcb86519b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fdcb86519b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdcb86519b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identity=13140 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdcb86519b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identity=13140 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fdcb86519b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2124 identity=13140 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdcb86519b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2124 identity=13140 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.133 4a9742db-1e67-4d55-b19f-7abd2b935536 default }" containerID=c3cda4b9096c50c0cedc39a406cdb7e26ae0ab153a475badbaa8da9ee6a78319 datapathConfiguration="&{false false false false false }" interface=lxcd13d132b4736 k8sPodName=monitoring/loki-gateway-5cc45946cd-vgxjq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3cda4b909 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-vgxjq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3cda4b909 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-vgxjq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3cda4b909 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identity=46688 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-vgxjq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3cda4b909 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identity=46688 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-vgxjq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 b0baa458-1527-40f8-8e68-3eb4826c09d5 default }" containerID=eb334c3dda6c0f7e29293da5125cb775e69bfd2c290eb6d76d25994eab0ce85a datapathConfiguration="&{false false false false false }" interface=lxcc301d5597f73 k8sPodName=local-path-storage/helper-pod-create-pvc-b221d542-49a6-4dc7-99ed-cefae1264948 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb334c3dda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b221d542-49a6-4dc7-99ed-cefae1264948 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb334c3dda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b221d542-49a6-4dc7-99ed-cefae1264948 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb334c3dda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 identity=19649 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b221d542-49a6-4dc7-99ed-cefae1264948 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb334c3dda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 identity=19649 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b221d542-49a6-4dc7-99ed-cefae1264948 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3cda4b909 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=680 identity=46688 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-vgxjq subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3cda4b909 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=680 identity=46688 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-vgxjq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=eb334c3dda datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2206 identity=19649 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b221d542-49a6-4dc7-99ed-cefae1264948 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb334c3dda datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2206 identity=19649 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b221d542-49a6-4dc7-99ed-cefae1264948 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.148 42bb7e06-0340-4a5d-90b3-dd401466c535 default }" containerID=15d1aa3e7fce9250af0707ce8d4a13be6ab2b54bf6718b6f23b4fbbc3d92088d datapathConfiguration="&{false false false false false }" interface=lxce4f31b81d690 k8sPodName=monitoring/vector-q2gk8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15d1aa3e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/vector-q2gk8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15d1aa3e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/vector-q2gk8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15d1aa3e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=33037 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/vector-q2gk8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15d1aa3e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=33037 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/vector-q2gk8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15d1aa3e7f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=228 identity=33037 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/vector-q2gk8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=15d1aa3e7f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=228 identity=33037 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/vector-q2gk8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eb334c3dda endpointID=2206 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b221d542-49a6-4dc7-99ed-cefae1264948 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=eb334c3dda datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2206 identity=19649 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b221d542-49a6-4dc7-99ed-cefae1264948 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.226 ab83ee7c-1b1c-465c-8c25-a4b72616bd21 default }" containerID=0d12d9a24e4fcce8a26a7d141a903a7ec311889f80ebe7e3cdaf72a74b0c185f datapathConfiguration="&{false false false false false }" interface=lxc06537a3f08aa k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d12d9a24e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d12d9a24e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0d12d9a24e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0d12d9a24e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identity=60257 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d12d9a24e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identity=60257 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d12d9a24e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1225 identity=60257 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d12d9a24e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1225 identity=60257 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 d5ff74ae-a3c3-4846-a6b4-3fe508d234f5 default }" containerID=8406ad716fc064d57406fccad8f8932fcd5099f842cc679ac2af21c0f9c2b587 datapathConfiguration="&{false false false false false }" interface=lxc7242f7ebb404 k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-kvd7l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8406ad716f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-kvd7l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8406ad716f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-kvd7l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8406ad716f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-kvd7l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=prometheus-pushgateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=prometheus-pushgateway;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8406ad716f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identity=59624 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-kvd7l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8406ad716f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identity=59624 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-kvd7l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8406ad716f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=324 identity=59624 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-kvd7l subsys=endpoint level=info msg="Successful endpoint creation" containerID=8406ad716f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=324 identity=59624 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-kvd7l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.30 1cf643a5-300c-4a23-94a4-fd577a43f178 default }" containerID=47af61480e9fb7a567c23ee88178b0402ff1972257b4c7060d49adeb97989a41 datapathConfiguration="&{false false false false false }" interface=lxcddb30517f087 k8sPodName=openstack/memcached-memcached-c47d949f5-j58nz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47af61480e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1254 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-j58nz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47af61480e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1254 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-j58nz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47af61480e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1254 identity=12617 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-j58nz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47af61480e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1254 identity=12617 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-j58nz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=47af61480e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1254 identity=12617 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-j58nz subsys=endpoint level=info msg="Successful endpoint creation" containerID=47af61480e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1254 identity=12617 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-j58nz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.19 097aed26-2afd-497f-a27a-cb03a4ff654e default }" containerID=7fafc8a8737798ee5d0f03deab8703267e97cea7298fc02bb0dad60b0732b86e datapathConfiguration="&{false false false false false }" interface=lxc81fc774b7338 k8sPodName=local-path-storage/helper-pod-create-pvc-42e0e1e4-6989-4f83-accf-264914035eae labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fafc8a873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2824 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42e0e1e4-6989-4f83-accf-264914035eae subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fafc8a873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2824 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42e0e1e4-6989-4f83-accf-264914035eae subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7fafc8a873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2824 identity=19649 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42e0e1e4-6989-4f83-accf-264914035eae oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7fafc8a873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2824 identity=19649 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42e0e1e4-6989-4f83-accf-264914035eae subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7fafc8a873 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2824 identity=19649 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42e0e1e4-6989-4f83-accf-264914035eae subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fafc8a873 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2824 identity=19649 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42e0e1e4-6989-4f83-accf-264914035eae subsys=daemon level=info msg="Delete endpoint request" containerID=7fafc8a873 endpointID=2824 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-42e0e1e4-6989-4f83-accf-264914035eae subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7fafc8a873 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2824 identity=19649 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42e0e1e4-6989-4f83-accf-264914035eae subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 a88ed0fd-c7bd-44c7-bd77-db7d9c641497 default }" containerID=c7baa6689650f43db6c30648962d480f3fdd3daa493fc5f0c0e716cefd567d09 datapathConfiguration="&{false false false false false }" interface=lxcf043d9b83874 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7baa66896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7baa66896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7baa66896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 identity=1108 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7baa66896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 identity=1108 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c7baa66896 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1900 identity=1108 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7baa66896 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1900 identity=1108 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.22 d638d4a7-764d-4b12-8a59-0bfe79f36d4c default }" containerID=0d4adc4684e3846a2487c66fcb37ffe9ab6c020462873219863816a45acf94ed datapathConfiguration="&{false false false false false }" interface=lxc0e1f5f0d76d7 k8sPodName=openstack/keystone-api-7f8c65cb75-dkjxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d4adc4684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3929 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-api-7f8c65cb75-dkjxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d4adc4684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3929 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-api-7f8c65cb75-dkjxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0d4adc4684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3929 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-api-7f8c65cb75-dkjxl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d4adc4684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3929 identity=37880 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-api-7f8c65cb75-dkjxl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d4adc4684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3929 identity=37880 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-api-7f8c65cb75-dkjxl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 042307c0-3dfa-4753-907a-e6dba3715c05 default }" containerID=a81bfa92e5d0adcc3ab51e22405e92ecec716cd467e60324522581d19022a250 datapathConfiguration="&{false false false false false }" interface=lxc3f9df6665825 k8sPodName=openstack/keystone-credential-setup-4t8np labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a81bfa92e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=767 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-4t8np subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a81bfa92e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=767 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=71be42cd-bc41-46d1-95fb-d2b4be73df77,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=71be42cd-bc41-46d1-95fb-d2b4be73df77,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-4t8np subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=71be42cd-bc41-46d1-95fb-d2b4be73df77;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=71be42cd-bc41-46d1-95fb-d2b4be73df77;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a81bfa92e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=767 identity=12493 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=71be42cd-bc41-46d1-95fb-d2b4be73df77,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=71be42cd-bc41-46d1-95fb-d2b4be73df77,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-4t8np oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a81bfa92e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=767 identity=12493 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-4t8np subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d4adc4684 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3929 identity=37880 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-api-7f8c65cb75-dkjxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d4adc4684 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3929 identity=37880 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-api-7f8c65cb75-dkjxl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a81bfa92e5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=767 identity=12493 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-4t8np subsys=endpoint level=info msg="Successful endpoint creation" containerID=a81bfa92e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=767 identity=12493 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-4t8np subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a81bfa92e5 endpointID=767 k8sNamespace=openstack k8sPodName=keystone-credential-setup-4t8np subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=71be42cd-bc41-46d1-95fb-d2b4be73df77 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=71be42cd-bc41-46d1-95fb-d2b4be73df77 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a81bfa92e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=767 identity=12493 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-4t8np subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 16c5b94d-a270-4c56-a794-2bc86ca4b380 default }" containerID=328848598e25e8fe05ec742f18fa4d3e7b997202db654f28d8a69fe097f85515 datapathConfiguration="&{false false false false false }" interface=lxc5fd253f9ffc6 k8sPodName=openstack/keystone-db-init-dr9ff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=328848598e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-db-init-dr9ff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=328848598e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d606c35a-3ea1-4d58-bf3e-48d7050d25dc,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d606c35a-3ea1-4d58-bf3e-48d7050d25dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-db-init-dr9ff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=328848598e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-db-init-dr9ff line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d606c35a-3ea1-4d58-bf3e-48d7050d25dc;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=d606c35a-3ea1-4d58-bf3e-48d7050d25dc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=328848598e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identity=39415 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d606c35a-3ea1-4d58-bf3e-48d7050d25dc,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d606c35a-3ea1-4d58-bf3e-48d7050d25dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-db-init-dr9ff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=328848598e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identity=39415 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-db-init-dr9ff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=328848598e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=410 identity=39415 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-db-init-dr9ff subsys=endpoint level=info msg="Successful endpoint creation" containerID=328848598e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=410 identity=39415 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-db-init-dr9ff subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=328848598e endpointID=410 k8sNamespace=openstack k8sPodName=keystone-db-init-dr9ff subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d606c35a-3ea1-4d58-bf3e-48d7050d25dc k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=d606c35a-3ea1-4d58-bf3e-48d7050d25dc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=328848598e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=410 identity=39415 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-db-init-dr9ff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 0d8f6aa3-01a2-495a-ab52-69d9d99ffe0a default }" containerID=888502b520495359f129de85f6fdadfeb3d2c25f1d8a54900c97e56fbffc12fa datapathConfiguration="&{false false false false false }" interface=lxc54e2ae58c5c6 k8sPodName=openstack/keystone-fernet-setup-p7rwk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=888502b520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2869 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-fernet-setup-p7rwk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=888502b520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2869 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d37e3f53-21c3-4449-adba-662e99a77895,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=d37e3f53-21c3-4449-adba-662e99a77895,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-fernet-setup-p7rwk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d37e3f53-21c3-4449-adba-662e99a77895;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=d37e3f53-21c3-4449-adba-662e99a77895;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=888502b520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2869 identity=17267 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d37e3f53-21c3-4449-adba-662e99a77895,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=d37e3f53-21c3-4449-adba-662e99a77895,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-fernet-setup-p7rwk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=888502b520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2869 identity=17267 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-fernet-setup-p7rwk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=888502b520 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2869 identity=17267 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-fernet-setup-p7rwk subsys=endpoint level=info msg="Successful endpoint creation" containerID=888502b520 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2869 identity=17267 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-fernet-setup-p7rwk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=888502b520 endpointID=2869 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-p7rwk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d37e3f53-21c3-4449-adba-662e99a77895 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=d37e3f53-21c3-4449-adba-662e99a77895 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=888502b520 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2869 identity=17267 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-fernet-setup-p7rwk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 8dab24da-7ec4-4710-b6aa-c21615c74057 default }" containerID=21d9c002ded48da5cffa4219a7877c6c56211c3f0b8bfc3077a766d1800bbe44 datapathConfiguration="&{false false false false false }" interface=lxc7d1df0cb5143 k8sPodName=openstack/keystone-db-sync-r88bh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21d9c002de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-db-sync-r88bh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21d9c002de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=87dd4343-18f1-4603-819b-8eaa551cb5b0,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=87dd4343-18f1-4603-819b-8eaa551cb5b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-db-sync-r88bh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=87dd4343-18f1-4603-819b-8eaa551cb5b0;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=87dd4343-18f1-4603-819b-8eaa551cb5b0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21d9c002de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identity=56038 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=87dd4343-18f1-4603-819b-8eaa551cb5b0,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=87dd4343-18f1-4603-819b-8eaa551cb5b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-db-sync-r88bh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21d9c002de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identity=56038 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-db-sync-r88bh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=21d9c002de datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1403 identity=56038 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-db-sync-r88bh subsys=endpoint level=info msg="Successful endpoint creation" containerID=21d9c002de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1403 identity=56038 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-db-sync-r88bh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=21d9c002de endpointID=1403 k8sNamespace=openstack k8sPodName=keystone-db-sync-r88bh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=87dd4343-18f1-4603-819b-8eaa551cb5b0 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=87dd4343-18f1-4603-819b-8eaa551cb5b0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=21d9c002de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1403 identity=56038 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-db-sync-r88bh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 91696edf-d244-4b73-87e0-bec2a9131c6c default }" containerID=d04bafd0469e1f24dbd42ede411ecaf0a7c0bfc626c5c73989dc047a56f8304d datapathConfiguration="&{false false false false false }" interface=lxca1678e5310b8 k8sPodName=openstack/keystone-rabbit-init-frwxk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d04bafd046 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-frwxk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d04bafd046 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=88def5a8-8acb-490e-a50a-2e93424d6ebc,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=88def5a8-8acb-490e-a50a-2e93424d6ebc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-frwxk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d04bafd046 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-frwxk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=88def5a8-8acb-490e-a50a-2e93424d6ebc;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=88def5a8-8acb-490e-a50a-2e93424d6ebc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d04bafd046 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identity=10116 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=88def5a8-8acb-490e-a50a-2e93424d6ebc,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=88def5a8-8acb-490e-a50a-2e93424d6ebc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-frwxk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d04bafd046 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identity=10116 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-frwxk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d04bafd046 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=575 identity=10116 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-frwxk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d04bafd046 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=575 identity=10116 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-frwxk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d04bafd046 endpointID=575 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-frwxk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=88def5a8-8acb-490e-a50a-2e93424d6ebc k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=88def5a8-8acb-490e-a50a-2e93424d6ebc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d04bafd046 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=575 identity=10116 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-rabbit-init-frwxk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 061caa1f-f025-4ed3-bb61-78f4409aa12a default }" containerID=d87796155b864e176bf585c9d41686df5727015f9f4dde6a67a0df6fe41d375a datapathConfiguration="&{false false false false false }" interface=lxc208737f3fb14 k8sPodName=openstack/keystone-domain-manage-9l8tn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d87796155b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3010 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-domain-manage-9l8tn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d87796155b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3010 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fcc09529-5cd4-4bac-b093-be4788e036d1,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=fcc09529-5cd4-4bac-b093-be4788e036d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-domain-manage-9l8tn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d87796155b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3010 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-domain-manage-9l8tn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fcc09529-5cd4-4bac-b093-be4788e036d1;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=fcc09529-5cd4-4bac-b093-be4788e036d1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d87796155b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3010 identity=36454 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fcc09529-5cd4-4bac-b093-be4788e036d1,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=fcc09529-5cd4-4bac-b093-be4788e036d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-domain-manage-9l8tn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d87796155b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3010 identity=36454 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-domain-manage-9l8tn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d87796155b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3010 identity=36454 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-domain-manage-9l8tn subsys=endpoint level=info msg="Successful endpoint creation" containerID=d87796155b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3010 identity=36454 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-domain-manage-9l8tn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d87796155b endpointID=3010 k8sNamespace=openstack k8sPodName=keystone-domain-manage-9l8tn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fcc09529-5cd4-4bac-b093-be4788e036d1 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=fcc09529-5cd4-4bac-b093-be4788e036d1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d87796155b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3010 identity=36454 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-domain-manage-9l8tn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 87d737e6-24cc-49b8-bf3f-2e6861979975 default }" containerID=4b4398c97f41888a08f426c5806ecebe1d87af47ef60cf9ad749c96072601b8d datapathConfiguration="&{false false false false false }" interface=lxcf58db7641643 k8sPodName=openstack/keystone-bootstrap-2847g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b4398c97f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-bootstrap-2847g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b4398c97f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aad42c11-b2a9-43ef-a302-4a2cd9c671b9,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=aad42c11-b2a9-43ef-a302-4a2cd9c671b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-bootstrap-2847g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4b4398c97f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-bootstrap-2847g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=aad42c11-b2a9-43ef-a302-4a2cd9c671b9;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=aad42c11-b2a9-43ef-a302-4a2cd9c671b9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b4398c97f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 identity=28800 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aad42c11-b2a9-43ef-a302-4a2cd9c671b9,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=aad42c11-b2a9-43ef-a302-4a2cd9c671b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-bootstrap-2847g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b4398c97f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 identity=28800 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-bootstrap-2847g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b4398c97f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1763 identity=28800 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-bootstrap-2847g subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b4398c97f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1763 identity=28800 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-bootstrap-2847g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4b4398c97f endpointID=1763 k8sNamespace=openstack k8sPodName=keystone-bootstrap-2847g subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=aad42c11-b2a9-43ef-a302-4a2cd9c671b9 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=aad42c11-b2a9-43ef-a302-4a2cd9c671b9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4b4398c97f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1763 identity=28800 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-bootstrap-2847g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 66097426-30e5-4487-a03f-14cb09cdda4b default }" containerID=90921159805d70d966dcf9bab50cb599c2c9175086fc39a5e3a99464fb95dd9c datapathConfiguration="&{false false false false false }" interface=lxcd7aa588d2747 k8sPodName=local-path-storage/helper-pod-create-pvc-82263a7c-7573-40b7-8365-c4f9bd1416c8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9092115980 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-82263a7c-7573-40b7-8365-c4f9bd1416c8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9092115980 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-82263a7c-7573-40b7-8365-c4f9bd1416c8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9092115980 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identity=19649 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-82263a7c-7573-40b7-8365-c4f9bd1416c8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9092115980 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identity=19649 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-82263a7c-7573-40b7-8365-c4f9bd1416c8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9092115980 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=980 identity=19649 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-82263a7c-7573-40b7-8365-c4f9bd1416c8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9092115980 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=980 identity=19649 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-82263a7c-7573-40b7-8365-c4f9bd1416c8 subsys=daemon level=info msg="Delete endpoint request" containerID=9092115980 endpointID=980 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-82263a7c-7573-40b7-8365-c4f9bd1416c8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9092115980 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=980 identity=19649 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-82263a7c-7573-40b7-8365-c4f9bd1416c8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 4c13d664-a570-40c3-a45a-13e90b7a8ee8 default }" containerID=1a391f7e95e3d7dc5ad3e5682ca4e63ddf42a265a941d9daa7406329ae5c1d6f datapathConfiguration="&{false false false false false }" interface=lxc928b09c5c89e k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a391f7e95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a391f7e95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a391f7e95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=12588 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a391f7e95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=12588 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1a391f7e95 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=82 identity=12588 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a391f7e95 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=82 identity=12588 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.202 b908f5a0-5013-4b1c-8f77-3d085eebf696 default }" containerID=6a96d39becf5b67b6a7271c204499cc296cc8f4ff7c2c07f37c83327624c0d31 datapathConfiguration="&{false false false false false }" interface=lxce688d58ddae6 k8sPodName=openstack/barbican-db-init-j9827 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a96d39bec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3704 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-init-j9827 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a96d39bec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3704 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4257a8ab-e7c0-473d-bcbc-62ec8ac257cb,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=4257a8ab-e7c0-473d-bcbc-62ec8ac257cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-init-j9827 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4257a8ab-e7c0-473d-bcbc-62ec8ac257cb;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=4257a8ab-e7c0-473d-bcbc-62ec8ac257cb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a96d39bec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3704 identity=13800 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4257a8ab-e7c0-473d-bcbc-62ec8ac257cb,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=4257a8ab-e7c0-473d-bcbc-62ec8ac257cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-init-j9827 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a96d39bec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3704 identity=13800 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-init-j9827 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a96d39bec datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3704 identity=13800 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-init-j9827 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a96d39bec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3704 identity=13800 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-init-j9827 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.149 4e98dc74-4eb8-4679-96e8-9d479864be38 default }" containerID=d153de0b315c262dfdac79a2a90de54dedfc4ad03c03fe67e53923c00b3031d8 datapathConfiguration="&{false false false false false }" interface=lxc50a0a70cfdbf k8sPodName=openstack/barbican-api-5748f4c84d-s9gw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d153de0b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-api-5748f4c84d-s9gw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d153de0b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-api-5748f4c84d-s9gw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d153de0b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identity=33751 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-api-5748f4c84d-s9gw4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d153de0b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identity=33751 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-api-5748f4c84d-s9gw4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d153de0b31 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1308 identity=33751 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-api-5748f4c84d-s9gw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d153de0b31 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1308 identity=33751 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-api-5748f4c84d-s9gw4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6a96d39bec endpointID=3704 k8sNamespace=openstack k8sPodName=barbican-db-init-j9827 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4257a8ab-e7c0-473d-bcbc-62ec8ac257cb k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=4257a8ab-e7c0-473d-bcbc-62ec8ac257cb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6a96d39bec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3704 identity=13800 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-init-j9827 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 fec164c4-f7b4-4cd8-80ed-2baff16b8c49 default }" containerID=51267ce1e256baf40002cc47efe88da72e2d9ef05f4299786994d4bd0f510748 datapathConfiguration="&{false false false false false }" interface=lxcac56e0091622 k8sPodName=openstack/barbican-db-sync-kz9lx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51267ce1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3425 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-sync-kz9lx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51267ce1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3425 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=44bdf119-fe46-4889-a7cc-b493923a7fed,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=44bdf119-fe46-4889-a7cc-b493923a7fed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-sync-kz9lx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=51267ce1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3425 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-sync-kz9lx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=44bdf119-fe46-4889-a7cc-b493923a7fed;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=44bdf119-fe46-4889-a7cc-b493923a7fed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51267ce1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3425 identity=21375 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=44bdf119-fe46-4889-a7cc-b493923a7fed,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=44bdf119-fe46-4889-a7cc-b493923a7fed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-sync-kz9lx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51267ce1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3425 identity=21375 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-sync-kz9lx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51267ce1e2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3425 identity=21375 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-sync-kz9lx subsys=endpoint level=info msg="Successful endpoint creation" containerID=51267ce1e2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3425 identity=21375 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-sync-kz9lx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=51267ce1e2 endpointID=3425 k8sNamespace=openstack k8sPodName=barbican-db-sync-kz9lx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=44bdf119-fe46-4889-a7cc-b493923a7fed k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=44bdf119-fe46-4889-a7cc-b493923a7fed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=51267ce1e2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3425 identity=21375 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-sync-kz9lx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 f930fdee-b0bf-424b-9c9a-9c23471fa101 default }" containerID=ed8d4f02642f45de961549ed8414ef2a186aaaee029414cb565bd1758372d620 datapathConfiguration="&{false false false false false }" interface=lxce29b1d258c3e k8sPodName=openstack/barbican-rabbit-init-vkhlb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed8d4f0264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-vkhlb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed8d4f0264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6590cd6d-f1c1-4c27-8602-52c677b25c83,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6590cd6d-f1c1-4c27-8602-52c677b25c83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-vkhlb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6590cd6d-f1c1-4c27-8602-52c677b25c83;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=6590cd6d-f1c1-4c27-8602-52c677b25c83;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed8d4f0264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 identity=50552 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6590cd6d-f1c1-4c27-8602-52c677b25c83,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6590cd6d-f1c1-4c27-8602-52c677b25c83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-vkhlb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed8d4f0264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 identity=50552 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-vkhlb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed8d4f0264 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=478 identity=50552 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-vkhlb subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed8d4f0264 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=478 identity=50552 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-vkhlb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ed8d4f0264 endpointID=478 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-vkhlb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6590cd6d-f1c1-4c27-8602-52c677b25c83 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=6590cd6d-f1c1-4c27-8602-52c677b25c83 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ed8d4f0264 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=478 identity=50552 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-vkhlb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 5e0e7e67-bbf7-41d5-8ff0-d2492a56792b default }" containerID=a7b86e785baedb27e6ff1512a83f9b0ee28cae11c1b581f0c0fca427b8a9dcfb datapathConfiguration="&{false false false false false }" interface=lxccfa87420a0a7 k8sPodName=openstack/barbican-ks-service-8j25h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7b86e785b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-ks-service-8j25h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7b86e785b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8f2c5641-7b81-4d52-969e-827df64505f1,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=8f2c5641-7b81-4d52-969e-827df64505f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-ks-service-8j25h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8f2c5641-7b81-4d52-969e-827df64505f1;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=8f2c5641-7b81-4d52-969e-827df64505f1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7b86e785b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=26642 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8f2c5641-7b81-4d52-969e-827df64505f1,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=8f2c5641-7b81-4d52-969e-827df64505f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-ks-service-8j25h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7b86e785b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=26642 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-ks-service-8j25h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a7b86e785b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=316 identity=26642 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-ks-service-8j25h subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7b86e785b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=316 identity=26642 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-ks-service-8j25h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a7b86e785b endpointID=316 k8sNamespace=openstack k8sPodName=barbican-ks-service-8j25h subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8f2c5641-7b81-4d52-969e-827df64505f1 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=8f2c5641-7b81-4d52-969e-827df64505f1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a7b86e785b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=316 identity=26642 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-ks-service-8j25h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 a837ad05-117c-46fa-85d7-f5e6f5af6b7a default }" containerID=ae7230af45d05ddac62b9a679b07198626d1100576708cac22e86823d8958410 datapathConfiguration="&{false false false false false }" interface=lxc59fa66f22960 k8sPodName=openstack/barbican-ks-endpoints-ptstv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae7230af45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ptstv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae7230af45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=68d07280-20b2-448e-b32d-8c1a5a007c71,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=68d07280-20b2-448e-b32d-8c1a5a007c71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ptstv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=68d07280-20b2-448e-b32d-8c1a5a007c71;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=68d07280-20b2-448e-b32d-8c1a5a007c71;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae7230af45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identity=37120 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=68d07280-20b2-448e-b32d-8c1a5a007c71,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=68d07280-20b2-448e-b32d-8c1a5a007c71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ptstv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae7230af45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identity=37120 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ptstv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ae7230af45 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=565 identity=37120 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ptstv subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae7230af45 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=565 identity=37120 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ptstv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ae7230af45 endpointID=565 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-ptstv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=68d07280-20b2-448e-b32d-8c1a5a007c71 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=68d07280-20b2-448e-b32d-8c1a5a007c71 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ae7230af45 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=565 identity=37120 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ptstv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 c64bca33-0f74-4598-91fd-1ee8e30737f8 default }" containerID=ed1038d3a28a810b97e3aefc0d9f7d81652d9f0bf97f63fec8b0cc88db9b8a94 datapathConfiguration="&{false false false false false }" interface=lxcc52285447de7 k8sPodName=openstack/barbican-ks-user-tcflf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed1038d3a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-user-tcflf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed1038d3a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9850cca2-d63f-4451-b7f4-2522c46c1c9c,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=9850cca2-d63f-4451-b7f4-2522c46c1c9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-user-tcflf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ed1038d3a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-user-tcflf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9850cca2-d63f-4451-b7f4-2522c46c1c9c;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=9850cca2-d63f-4451-b7f4-2522c46c1c9c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed1038d3a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 identity=62742 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9850cca2-d63f-4451-b7f4-2522c46c1c9c,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=9850cca2-d63f-4451-b7f4-2522c46c1c9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-user-tcflf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed1038d3a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 identity=62742 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-user-tcflf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed1038d3a2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3340 identity=62742 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-user-tcflf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed1038d3a2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3340 identity=62742 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-user-tcflf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ed1038d3a2 endpointID=3340 k8sNamespace=openstack k8sPodName=barbican-ks-user-tcflf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9850cca2-d63f-4451-b7f4-2522c46c1c9c k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=9850cca2-d63f-4451-b7f4-2522c46c1c9c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ed1038d3a2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3340 identity=62742 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-user-tcflf subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.50 ab6c29d8-b3ee-43bc-9747-a98ecc602021 default }" containerID=9a669fd2fb74248c3ce99e373dc3e81519e0cdabc0a60da1f3cc0990b9b119fc datapathConfiguration="&{false false false false false }" interface=lxc2b0f42ff1849 k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-g26mv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a669fd2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3101 ipv4=10.0.0.50 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-g26mv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a669fd2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3101 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.50 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-g26mv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.10.10;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9a669fd2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3101 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.50 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-g26mv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9a669fd2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3101 identity=8580 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.50 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-g26mv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a669fd2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3101 identity=8580 ipv4=10.0.0.50 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-g26mv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a669fd2fb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3101 identity=8580 ipv4=10.0.0.50 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-g26mv subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a669fd2fb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3101 identity=8580 ipv4=10.0.0.50 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-g26mv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.46 d3b771cd-f145-456d-8dbe-52e95a769862 default }" containerID=8e5dc0d59d5609301042c32253d2853de06685be187818ddb2699fdce354624a datapathConfiguration="&{false false false false false }" interface=lxc1f92e257a503 k8sPodName=openstack/rook-ceph-detect-version-zg9vk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e5dc0d59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zg9vk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e5dc0d59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=15bbadc1-44de-440b-9034-bd733697fad2,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=15bbadc1-44de-440b-9034-bd733697fad2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zg9vk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8e5dc0d59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zg9vk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=15bbadc1-44de-440b-9034-bd733697fad2;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=15bbadc1-44de-440b-9034-bd733697fad2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e5dc0d59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 identity=47935 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=15bbadc1-44de-440b-9034-bd733697fad2,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=15bbadc1-44de-440b-9034-bd733697fad2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zg9vk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e5dc0d59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 identity=47935 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zg9vk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e5dc0d59d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3340 identity=47935 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zg9vk subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e5dc0d59d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3340 identity=47935 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zg9vk subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03787858292640037 newInterval=11m15s subsys=map-ct level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e5dc0d59d endpointID=3340 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-zg9vk subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=15bbadc1-44de-440b-9034-bd733697fad2 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=15bbadc1-44de-440b-9034-bd733697fad2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=8e5dc0d59d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3340 identity=47935 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zg9vk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 57a45063-3306-48e4-a58e-8f2f6dd58351 default }" containerID=68000a8eb8de12d93019a925b9db84cf6bdc33dbdbab76a91834a2adbe621abf datapathConfiguration="&{false false false false false }" interface=lxcd99f16657d5f k8sPodName=local-path-storage/helper-pod-create-pvc-bcfd8f27-4271-463c-9107-8bd0a7b127b3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68000a8eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bcfd8f27-4271-463c-9107-8bd0a7b127b3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68000a8eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bcfd8f27-4271-463c-9107-8bd0a7b127b3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68000a8eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identity=19649 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bcfd8f27-4271-463c-9107-8bd0a7b127b3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68000a8eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identity=19649 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bcfd8f27-4271-463c-9107-8bd0a7b127b3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68000a8eb8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2940 identity=19649 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bcfd8f27-4271-463c-9107-8bd0a7b127b3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68000a8eb8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2940 identity=19649 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bcfd8f27-4271-463c-9107-8bd0a7b127b3 subsys=daemon level=info msg="Delete endpoint request" containerID=68000a8eb8 endpointID=2940 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bcfd8f27-4271-463c-9107-8bd0a7b127b3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=68000a8eb8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2940 identity=19649 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bcfd8f27-4271-463c-9107-8bd0a7b127b3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 eecb9a1a-24ac-41e1-82d2-090fa43f817e default }" containerID=3a414a05032c88614b0dfa3c24eb8f62d2964796455ed5d4b282eb07a3a3b619 datapathConfiguration="&{false false false false false }" interface=lxcb2b2b509498f k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a414a0503 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2493 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a414a0503 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2493 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a414a0503 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2493 identity=23226 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3a414a0503 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2493 identity=23226 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a414a0503 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2493 identity=23226 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a414a0503 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2493 identity=23226 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.60 e983aaa1-8aa0-4ce2-853a-02d833097413 default }" containerID=ea3d54adbfc379982a5209d935f4226da556c4df9b1efd8ba0c59222e1acb62a datapathConfiguration="&{false false false false false }" interface=lxcf6db548b9170 k8sPodName=openstack/ceph-object-controller-detect-version-z4vhn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea3d54adbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=981 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z4vhn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea3d54adbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=981 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=02ff903c-c031-4397-98bb-460cd3b871d5,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=02ff903c-c031-4397-98bb-460cd3b871d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z4vhn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ea3d54adbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=981 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.60 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z4vhn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=02ff903c-c031-4397-98bb-460cd3b871d5;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=02ff903c-c031-4397-98bb-460cd3b871d5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea3d54adbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=981 identity=10136 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=02ff903c-c031-4397-98bb-460cd3b871d5,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=02ff903c-c031-4397-98bb-460cd3b871d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z4vhn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea3d54adbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=981 identity=10136 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z4vhn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea3d54adbf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=981 identity=10136 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z4vhn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea3d54adbf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=981 identity=10136 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z4vhn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ea3d54adbf endpointID=981 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-z4vhn subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=02ff903c-c031-4397-98bb-460cd3b871d5 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=02ff903c-c031-4397-98bb-460cd3b871d5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=ea3d54adbf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=981 identity=10136 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z4vhn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 617b5f95-697d-40be-9ad8-b6e284018086 default }" containerID=dcfc945c8760d13a2c667a32b62b128536dbe0ca8a171d6c0feaf8baebf3f38f datapathConfiguration="&{false false false false false }" interface=lxc9be553c78a8c k8sPodName=openstack/glance-db-init-bbq5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dcfc945c87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2962 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-db-init-bbq5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dcfc945c87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2962 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=51c4d887-6125-405d-8467-72524d275d3c,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=51c4d887-6125-405d-8467-72524d275d3c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-db-init-bbq5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=51c4d887-6125-405d-8467-72524d275d3c;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=51c4d887-6125-405d-8467-72524d275d3c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dcfc945c87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2962 identity=65469 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=51c4d887-6125-405d-8467-72524d275d3c,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=51c4d887-6125-405d-8467-72524d275d3c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-db-init-bbq5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dcfc945c87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2962 identity=65469 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-db-init-bbq5f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dcfc945c87 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2962 identity=65469 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-db-init-bbq5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=dcfc945c87 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2962 identity=65469 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-db-init-bbq5f subsys=daemon level=info msg="Delete endpoint request" containerID=dcfc945c87 endpointID=2962 k8sNamespace=openstack k8sPodName=glance-db-init-bbq5f subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=51c4d887-6125-405d-8467-72524d275d3c k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=51c4d887-6125-405d-8467-72524d275d3c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=dcfc945c87 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2962 identity=65469 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-db-init-bbq5f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 d3813cc7-c4f4-4968-ab82-24058c627a2e default }" containerID=f3719af40eacfb6d763c00624a19f1c209b759f10b287e40505def878e6a49c7 datapathConfiguration="&{false false false false false }" interface=lxc6fdba376c4de k8sPodName=openstack/glance-db-sync-d4rk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3719af40e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-db-sync-d4rk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3719af40e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1e682a77-555e-42cf-8361-62e1eac4a721,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=1e682a77-555e-42cf-8361-62e1eac4a721,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-db-sync-d4rk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1e682a77-555e-42cf-8361-62e1eac4a721;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=1e682a77-555e-42cf-8361-62e1eac4a721;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3719af40e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=45529 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1e682a77-555e-42cf-8361-62e1eac4a721,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=1e682a77-555e-42cf-8361-62e1eac4a721,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-db-sync-d4rk6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f3719af40e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=45529 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-db-sync-d4rk6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f3719af40e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=639 identity=45529 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-db-sync-d4rk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3719af40e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=639 identity=45529 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-db-sync-d4rk6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f3719af40e endpointID=639 k8sNamespace=openstack k8sPodName=glance-db-sync-d4rk6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1e682a77-555e-42cf-8361-62e1eac4a721 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=1e682a77-555e-42cf-8361-62e1eac4a721 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f3719af40e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=639 identity=45529 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-db-sync-d4rk6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 6a4ac568-9690-4dfa-9daf-d53aecb11400 default }" containerID=e32674fe225bb68eaa279bf573e486727b3c6311f9424f80171dd13c4a6dc992 datapathConfiguration="&{false false false false false }" interface=lxc3f2f6e7f4134 k8sPodName=openstack/glance-rabbit-init-8d4q2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e32674fe22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-rabbit-init-8d4q2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e32674fe22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=577e590b-446e-404c-839d-b23937319f6d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=577e590b-446e-404c-839d-b23937319f6d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-rabbit-init-8d4q2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=577e590b-446e-404c-839d-b23937319f6d;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=577e590b-446e-404c-839d-b23937319f6d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e32674fe22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identity=32692 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=577e590b-446e-404c-839d-b23937319f6d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=577e590b-446e-404c-839d-b23937319f6d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-rabbit-init-8d4q2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e32674fe22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identity=32692 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-rabbit-init-8d4q2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e32674fe22 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=503 identity=32692 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-rabbit-init-8d4q2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e32674fe22 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=503 identity=32692 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-rabbit-init-8d4q2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e32674fe22 endpointID=503 k8sNamespace=openstack k8sPodName=glance-rabbit-init-8d4q2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=577e590b-446e-404c-839d-b23937319f6d k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=577e590b-446e-404c-839d-b23937319f6d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e32674fe22 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=503 identity=32692 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-rabbit-init-8d4q2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 a805fa85-ac64-4634-8b92-71031da45102 default }" containerID=dbb1540004c726d88074e7fb7ea22bdb377d2695b97bfb6d2bf41403ba554414 datapathConfiguration="&{false false false false false }" interface=lxc69541063454d k8sPodName=openstack/glance-ks-service-sf5tq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbb1540004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-ks-service-sf5tq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbb1540004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=26652c72-ba2a-47fd-8828-e99a1d3378d2,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=26652c72-ba2a-47fd-8828-e99a1d3378d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-ks-service-sf5tq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=26652c72-ba2a-47fd-8828-e99a1d3378d2;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=26652c72-ba2a-47fd-8828-e99a1d3378d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbb1540004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identity=2254 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=26652c72-ba2a-47fd-8828-e99a1d3378d2,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=26652c72-ba2a-47fd-8828-e99a1d3378d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-ks-service-sf5tq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbb1540004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identity=2254 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-ks-service-sf5tq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dbb1540004 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1150 identity=2254 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-ks-service-sf5tq subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbb1540004 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1150 identity=2254 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-ks-service-sf5tq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dbb1540004 endpointID=1150 k8sNamespace=openstack k8sPodName=glance-ks-service-sf5tq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=26652c72-ba2a-47fd-8828-e99a1d3378d2 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=26652c72-ba2a-47fd-8828-e99a1d3378d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=dbb1540004 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1150 identity=2254 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-ks-service-sf5tq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 c1e90db3-390a-46d9-9464-8ed2f236a05a default }" containerID=64a8508501feadb99a91c503d2d178493d0ee228a84b851f5655855501248c77 datapathConfiguration="&{false false false false false }" interface=lxcf3507bcef2fd k8sPodName=openstack/glance-ks-endpoints-r6x2t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64a8508501 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1721 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-ks-endpoints-r6x2t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64a8508501 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1721 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6f0fe7eb-61f9-4a11-8968-b1528edec8d0,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6f0fe7eb-61f9-4a11-8968-b1528edec8d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-ks-endpoints-r6x2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=64a8508501 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1721 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-ks-endpoints-r6x2t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6f0fe7eb-61f9-4a11-8968-b1528edec8d0;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=6f0fe7eb-61f9-4a11-8968-b1528edec8d0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64a8508501 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1721 identity=3703 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6f0fe7eb-61f9-4a11-8968-b1528edec8d0,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6f0fe7eb-61f9-4a11-8968-b1528edec8d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-ks-endpoints-r6x2t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64a8508501 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1721 identity=3703 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-ks-endpoints-r6x2t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64a8508501 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1721 identity=3703 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-ks-endpoints-r6x2t subsys=endpoint level=info msg="Successful endpoint creation" containerID=64a8508501 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1721 identity=3703 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-ks-endpoints-r6x2t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=64a8508501 endpointID=1721 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-r6x2t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6f0fe7eb-61f9-4a11-8968-b1528edec8d0 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=6f0fe7eb-61f9-4a11-8968-b1528edec8d0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=64a8508501 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1721 identity=3703 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-ks-endpoints-r6x2t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 e7775b5e-edb0-422a-8072-b16f5a7c0619 default }" containerID=e569b891e7d7af721fd0f1c401b871195f3018c4f235d314babaf84f5a32b104 datapathConfiguration="&{false false false false false }" interface=lxc1bdb71cb6181 k8sPodName=openstack/glance-ks-user-j7bvx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e569b891e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-ks-user-j7bvx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e569b891e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6b0dce5b-be17-42ae-8c3c-7099506f53dc,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=6b0dce5b-be17-42ae-8c3c-7099506f53dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-ks-user-j7bvx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6b0dce5b-be17-42ae-8c3c-7099506f53dc;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=6b0dce5b-be17-42ae-8c3c-7099506f53dc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e569b891e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 identity=7775 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6b0dce5b-be17-42ae-8c3c-7099506f53dc,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=6b0dce5b-be17-42ae-8c3c-7099506f53dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-ks-user-j7bvx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e569b891e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 identity=7775 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-ks-user-j7bvx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e569b891e7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1292 identity=7775 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-ks-user-j7bvx subsys=endpoint level=info msg="Successful endpoint creation" containerID=e569b891e7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1292 identity=7775 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-ks-user-j7bvx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.163 209bbde7-e906-4bed-80ff-ec6461c9884e default }" containerID=f842a98631523c248c9cb12813bbcf3d2ab8b776faa875201a7b012b50c31aa3 datapathConfiguration="&{false false false false false }" interface=lxc179ce697fff6 k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-lsmtz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f842a98631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-lsmtz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f842a98631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-lsmtz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f842a98631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identity=52304 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-lsmtz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f842a98631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identity=52304 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-lsmtz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.152 f5d2b585-d65c-49b8-9d4b-3556d3b86e3d default }" containerID=47fae6ae6d38076be40afb4d9d86ff498ce314bcb92d37110832a0b54e984a18 datapathConfiguration="&{false false false false false }" interface=lxca64ea019659b k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-kw4hr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47fae6ae6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-kw4hr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47fae6ae6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-kw4hr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook-version=v1.10.10;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47fae6ae6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 identity=17657 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-kw4hr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47fae6ae6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 identity=17657 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-kw4hr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f842a98631 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=120 identity=52304 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-lsmtz subsys=endpoint level=info msg="Successful endpoint creation" containerID=f842a98631 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=120 identity=52304 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-lsmtz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=47fae6ae6d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1132 identity=17657 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-kw4hr subsys=endpoint level=info msg="Successful endpoint creation" containerID=47fae6ae6d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1132 identity=17657 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-kw4hr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e569b891e7 endpointID=1292 k8sNamespace=openstack k8sPodName=glance-ks-user-j7bvx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6b0dce5b-be17-42ae-8c3c-7099506f53dc k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=6b0dce5b-be17-42ae-8c3c-7099506f53dc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e569b891e7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1292 identity=7775 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-ks-user-j7bvx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 09130c10-5382-4ae6-bbb5-a13cef98b0a8 default }" containerID=51099db127fd47eb41fe2a4903952cb1bd8adfa5a7e4b97a10d9dea53aee88e7 datapathConfiguration="&{false false false false false }" interface=lxc8f840e7f49a2 k8sPodName=openstack/glance-metadefs-load-cskq6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51099db127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1790 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-metadefs-load-cskq6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51099db127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1790 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ca79e88d-4eb6-478b-bfeb-7ae58dccd60a,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=ca79e88d-4eb6-478b-bfeb-7ae58dccd60a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-metadefs-load-cskq6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ca79e88d-4eb6-478b-bfeb-7ae58dccd60a;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=ca79e88d-4eb6-478b-bfeb-7ae58dccd60a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51099db127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1790 identity=10644 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ca79e88d-4eb6-478b-bfeb-7ae58dccd60a,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=ca79e88d-4eb6-478b-bfeb-7ae58dccd60a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-metadefs-load-cskq6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51099db127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1790 identity=10644 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-metadefs-load-cskq6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=51099db127 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1790 identity=10644 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-metadefs-load-cskq6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=51099db127 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1790 identity=10644 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-metadefs-load-cskq6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=51099db127 endpointID=1790 k8sNamespace=openstack k8sPodName=glance-metadefs-load-cskq6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ca79e88d-4eb6-478b-bfeb-7ae58dccd60a k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=ca79e88d-4eb6-478b-bfeb-7ae58dccd60a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=51099db127 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1790 identity=10644 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-metadefs-load-cskq6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 31bb44c8-5d71-41fa-9d80-5660d6d5fbe5 default }" containerID=60f0cbfc559d6959534f017326cd278fdd0bdc5319195ded6bb6922a0996c37d datapathConfiguration="&{false false false false false }" interface=lxc9fc0d68b2adb k8sPodName=openstack/glance-storage-init-dvch9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60f0cbfc55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-storage-init-dvch9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60f0cbfc55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6cdac192-bec0-4144-9e5a-a55ec04d84c1,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=6cdac192-bec0-4144-9e5a-a55ec04d84c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-storage-init-dvch9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=60f0cbfc55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-storage-init-dvch9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6cdac192-bec0-4144-9e5a-a55ec04d84c1;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=6cdac192-bec0-4144-9e5a-a55ec04d84c1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60f0cbfc55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identity=11261 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6cdac192-bec0-4144-9e5a-a55ec04d84c1,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=6cdac192-bec0-4144-9e5a-a55ec04d84c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-storage-init-dvch9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60f0cbfc55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identity=11261 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-storage-init-dvch9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60f0cbfc55 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1050 identity=11261 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-storage-init-dvch9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60f0cbfc55 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1050 identity=11261 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-storage-init-dvch9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60f0cbfc55 endpointID=1050 k8sNamespace=openstack k8sPodName=glance-storage-init-dvch9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6cdac192-bec0-4144-9e5a-a55ec04d84c1 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=6cdac192-bec0-4144-9e5a-a55ec04d84c1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=60f0cbfc55 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1050 identity=11261 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-storage-init-dvch9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 176f65ac-ef8e-4797-b3a0-7871c765653b default }" containerID=7fad28644482388438f99c16f7965ac863879df6f6bde87f027defd9aad854bf datapathConfiguration="&{false false false false false }" interface=lxc257856ab5206 k8sPodName=openstack/glance-api-69bf8f4f8b-5xtfz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fad286444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-api-69bf8f4f8b-5xtfz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fad286444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-api-69bf8f4f8b-5xtfz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7fad286444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 identity=34928 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-api-69bf8f4f8b-5xtfz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7fad286444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 identity=34928 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-api-69bf8f4f8b-5xtfz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7fad286444 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=775 identity=34928 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-api-69bf8f4f8b-5xtfz subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fad286444 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=775 identity=34928 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-api-69bf8f4f8b-5xtfz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.29 00669297-891a-4c1e-9438-8def16cc07d5 default }" containerID=151c2791756490539f70d53aeaebccfa9698eb48872868966b00ea2ba481bcd9 datapathConfiguration="&{false false false false false }" interface=lxcdff7173774b9 k8sPodName=openstack/staffeln-conductor-648bc66b65-2ttdc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=151c279175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-conductor-648bc66b65-2ttdc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=151c279175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-conductor-648bc66b65-2ttdc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=151c279175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 identity=2076 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-conductor-648bc66b65-2ttdc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=151c279175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 identity=2076 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-conductor-648bc66b65-2ttdc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 eac56b7b-c155-432c-99b7-d67ac63ab952 default }" containerID=5547e84a373e620b831f3855e4da4cc23a54019259b06e790654a506503989d5 datapathConfiguration="&{false false false false false }" interface=lxc65c93e1640a5 k8sPodName=openstack/staffeln-db-init-7klwj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5547e84a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-init-7klwj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5547e84a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=08f44784-566b-4b5a-a2bc-e1f209d3c284,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=08f44784-566b-4b5a-a2bc-e1f209d3c284,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-init-7klwj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=08f44784-566b-4b5a-a2bc-e1f209d3c284;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=08f44784-566b-4b5a-a2bc-e1f209d3c284;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5547e84a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=6919 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=08f44784-566b-4b5a-a2bc-e1f209d3c284,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=08f44784-566b-4b5a-a2bc-e1f209d3c284,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-init-7klwj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5547e84a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=6919 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-init-7klwj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=151c279175 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=241 identity=2076 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-conductor-648bc66b65-2ttdc subsys=endpoint level=info msg="Successful endpoint creation" containerID=151c279175 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=241 identity=2076 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-conductor-648bc66b65-2ttdc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5547e84a37 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=9 identity=6919 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-init-7klwj subsys=endpoint level=info msg="Successful endpoint creation" containerID=5547e84a37 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=9 identity=6919 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-init-7klwj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.136 60e2b198-ea02-4de6-8aa9-8bb21a615406 default }" containerID=7f12bf9bd13df02b722215f6887d6986d36b0caa7921ced96f6d14a94de002f3 datapathConfiguration="&{false false false false false }" interface=lxc0dbd5166eb7b k8sPodName=openstack/staffeln-api-744d465ccd-9hgp6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f12bf9bd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-api-744d465ccd-9hgp6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f12bf9bd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-api-744d465ccd-9hgp6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f12bf9bd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identity=18049 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-api-744d465ccd-9hgp6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f12bf9bd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identity=18049 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-api-744d465ccd-9hgp6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f12bf9bd1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=839 identity=18049 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-api-744d465ccd-9hgp6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f12bf9bd1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=839 identity=18049 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-api-744d465ccd-9hgp6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5547e84a37 endpointID=9 k8sNamespace=openstack k8sPodName=staffeln-db-init-7klwj subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=08f44784-566b-4b5a-a2bc-e1f209d3c284 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=08f44784-566b-4b5a-a2bc-e1f209d3c284 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=5547e84a37 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=9 identity=6919 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-init-7klwj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 4bbbce48-e4d0-4540-bf0d-911ec2b71f39 default }" containerID=a8be37ae3b6459964cfdc6b11ea69147295a88e95b93ee41e8e193a59764b15b datapathConfiguration="&{false false false false false }" interface=lxc827876ce303e k8sPodName=openstack/staffeln-db-sync-2drvb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8be37ae3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1040 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-db-sync-2drvb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8be37ae3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1040 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d539b0d2-f238-4464-92bd-df89c47c14a3,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=d539b0d2-f238-4464-92bd-df89c47c14a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-db-sync-2drvb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a8be37ae3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1040 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-db-sync-2drvb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=d539b0d2-f238-4464-92bd-df89c47c14a3;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=d539b0d2-f238-4464-92bd-df89c47c14a3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8be37ae3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1040 identity=41424 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d539b0d2-f238-4464-92bd-df89c47c14a3,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=d539b0d2-f238-4464-92bd-df89c47c14a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-db-sync-2drvb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8be37ae3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1040 identity=41424 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-db-sync-2drvb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8be37ae3b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1040 identity=41424 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-db-sync-2drvb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8be37ae3b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1040 identity=41424 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-db-sync-2drvb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager