level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.106475ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="63.091µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.143296ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.53µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=94.616475ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.5µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="17.19µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="54.651µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="57.161µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="107.233µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="390.67µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.07µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.351639ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=4.988992ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="36.681µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="37.521µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="426.57µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="92.842µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="61.032µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=151.697456ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="71.322µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.89.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.402297ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.44µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.108733ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.251µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.450378ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.661µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.96µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.53µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.08µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="27.15µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="17.02µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="59.951µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="397.648µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.131µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="11.02µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="329.737µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration=1.242348ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.31436ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.53µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="25.29µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.89 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.89 ipAddr.ipv6="" k8sNodeIP=199.204.45.89 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.89" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.150" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.89" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.89} {CiliumInternalIP 10.0.0.150}] 10.0.0.0/24 [] [] 10.0.0.188 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:38549" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.777145132s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="19.111µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="10.82µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="36.841µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="8.58µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.850267624s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.165 3192c756-31fa-4fa4-8096-d200e2ae2b72 default }" containerID=f1574fffcb06ccb710393ad1418fafae98159b48851288af5194d54bfae9b422 datapathConfiguration="&{false false false false false }" interface=lxc10abe2f9ff7c k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tcwdh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1574fffcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tcwdh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1574fffcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=c3fa5a7c-9129-4f93-878c-e27da51756ef,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=c3fa5a7c-9129-4f93-878c-e27da51756ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tcwdh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=c3fa5a7c-9129-4f93-878c-e27da51756ef;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=c3fa5a7c-9129-4f93-878c-e27da51756ef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f1574fffcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identity=25784 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=c3fa5a7c-9129-4f93-878c-e27da51756ef,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=c3fa5a7c-9129-4f93-878c-e27da51756ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tcwdh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1574fffcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identity=25784 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tcwdh subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=320.673961ms file-path=/var/run/cilium/state/templates/ca9352319031b7095ac29bcdee1d1f3f06119ec12e8becffc4bb1fb1a8d32bbc/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=612 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 ed24c10f-30df-4b75-ad63-043385f251c2 default }" containerID=3d63d2a372676b49a2d6d70f55c2727119c8d2be1a5d1daa5b22826b39a7abf6 datapathConfiguration="&{false false false false false }" interface=lxca52ed59c7d98 k8sPodName=kube-system/coredns-7c96b6546b-bsxdp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d63d2a372 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 ipv4=10.0.0.1 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bsxdp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d63d2a372 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.1 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bsxdp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d63d2a372 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identity=35916 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.1 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bsxdp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d63d2a372 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identity=35916 ipv4=10.0.0.1 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bsxdp subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1429 ipv4=10.0.0.188 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1429 identityLabels="reserved:health" ipv4=10.0.0.188 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1429 identity=4 identityLabels="reserved:health" ipv4=10.0.0.188 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.059415723s file-path=/var/run/cilium/state/templates/fb2ef54dd275bb740b775316e737bd3de76866678412b8440d41ced230d9a769/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=3d63d2a372 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=554 identity=35916 ipv4=10.0.0.1 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bsxdp subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d63d2a372 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=554 identity=35916 ipv4=10.0.0.1 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bsxdp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1429 identity=4 ipv4=10.0.0.188 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1574fffcb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1622 identity=25784 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tcwdh subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1574fffcb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1622 identity=25784 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tcwdh subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f1574fffcb endpointID=1622 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-tcwdh subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=c3fa5a7c-9129-4f93-878c-e27da51756ef k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=c3fa5a7c-9129-4f93-878c-e27da51756ef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=f1574fffcb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1622 identity=25784 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tcwdh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 81c57c6f-64b4-400e-acc0-21cf19565601 default }" containerID=6e94b8bc372787ea7dbf12d1b8cd26f0d7ea1629e34d098debc077efe1e6457d datapathConfiguration="&{false false false false false }" interface=lxc738068f3191f k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vvmzv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e94b8bc37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 ipv4=10.0.0.183 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vvmzv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e94b8bc37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.183 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vvmzv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e94b8bc37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identity=35052 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.183 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vvmzv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e94b8bc37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identity=35052 ipv4=10.0.0.183 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vvmzv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6e94b8bc37 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=975 identity=35052 ipv4=10.0.0.183 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vvmzv subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e94b8bc37 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=975 identity=35052 ipv4=10.0.0.183 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vvmzv subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=612 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00612 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00612 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00612 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00612:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=612 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 0f9926af-b384-40dd-ab03-9b2ff3937ee8 default }" containerID=ad916cea15065686255df63eee2cdfd208618d7e8ceeb35bd5d7a1ca04f08c46 datapathConfiguration="&{false false false false false }" interface=lxcbc14fd19ea7d k8sPodName=kube-system/coredns-67659f764b-q2tdn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad916cea15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 ipv4=10.0.0.64 ipv6= k8sPodName=kube-system/coredns-67659f764b-q2tdn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad916cea15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.64 ipv6= k8sPodName=kube-system/coredns-67659f764b-q2tdn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ad916cea15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identity=35916 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.64 ipv6= k8sPodName=kube-system/coredns-67659f764b-q2tdn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad916cea15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identity=35916 ipv4=10.0.0.64 ipv6= k8sPodName=kube-system/coredns-67659f764b-q2tdn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 1c84c647-150e-4e02-869d-0c4fc19ea627 default }" containerID=d42c7b0724d4025a68ae8d365856a1550b17367a8dc7ea7def78e8fb3ab6da18 datapathConfiguration="&{false false false false false }" interface=lxc08428ae16ec0 k8sPodName=kube-system/coredns-67659f764b-9664d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d42c7b0724 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1627 ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-9664d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d42c7b0724 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1627 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-9664d subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d42c7b0724 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1627 identity=35916 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-9664d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d42c7b0724 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1627 identity=35916 ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-9664d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad916cea15 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=63 identity=35916 ipv4=10.0.0.64 ipv6= k8sPodName=kube-system/coredns-67659f764b-q2tdn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad916cea15 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=63 identity=35916 ipv4=10.0.0.64 ipv6= k8sPodName=kube-system/coredns-67659f764b-q2tdn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d42c7b0724 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1627 identity=35916 ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-9664d subsys=endpoint level=info msg="Successful endpoint creation" containerID=d42c7b0724 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1627 identity=35916 ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-9664d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.249 3ee99bd6-59b7-4bb3-a9a4-815afb8be971 default }" containerID=51f07a514297dff4c322a512e1af6ce1477d341746e2e4e065f62dda93fec5da datapathConfiguration="&{false false false false false }" interface=lxc5114ebc300c8 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xq9pr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51f07a5142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xq9pr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51f07a5142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xq9pr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=51f07a5142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xq9pr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=51f07a5142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 identity=19576 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xq9pr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51f07a5142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 identity=19576 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xq9pr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51f07a5142 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1125 identity=19576 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xq9pr subsys=endpoint level=info msg="Successful endpoint creation" containerID=51f07a5142 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1125 identity=19576 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xq9pr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d63d2a372 endpointID=554 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-bsxdp subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=3d63d2a372 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=554 identity=35916 ipv4=10.0.0.1 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bsxdp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 062f41ae-6c42-44c5-993e-ecf77ff38f71 default }" containerID=7b370e7aff22727acbdcddfcd6136521ac16a900419d83cdddeec09c58f2cc21 datapathConfiguration="&{false false false false false }" interface=lxc8393f3fa87b6 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mnxbv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b370e7aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mnxbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b370e7aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mnxbv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b370e7aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 identity=15140 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mnxbv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b370e7aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 identity=15140 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mnxbv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.229 2c8224b0-c683-4c68-9382-c2991c0a92d6 default }" containerID=80e2996ce8e0ff46f3482c5aaff1c92c0b8367e304fcaa1cef0640f0e6977a8c datapathConfiguration="&{false false false false false }" interface=lxccfbefc06547f k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qjsbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80e2996ce8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 ipv4=10.0.0.229 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qjsbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80e2996ce8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.229 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qjsbm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 fd10a619-de5d-4b1f-b03d-cc49d000ba19 default }" containerID=6dac5c4849f825937ab301f9fe471341f9b3b0d7744f48abc6c81d5c23907ef6 datapathConfiguration="&{false false false false false }" interface=lxc471785d94eca k8sPodName=cert-manager/cert-manager-75c4c745bc-cvl7r labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=6dac5c4849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cvl7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6dac5c4849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cvl7r subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80e2996ce8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identity=5426 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.229 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qjsbm oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=80e2996ce8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identity=5426 ipv4=10.0.0.229 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qjsbm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6dac5c4849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 identity=19547 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cvl7r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6dac5c4849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 identity=19547 ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cvl7r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b370e7aff datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2806 identity=15140 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mnxbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b370e7aff datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2806 identity=15140 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mnxbv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=80e2996ce8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=181 identity=5426 ipv4=10.0.0.229 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qjsbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=80e2996ce8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=181 identity=5426 ipv4=10.0.0.229 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qjsbm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6dac5c4849 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=638 identity=19547 ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cvl7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=6dac5c4849 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=638 identity=19547 ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cvl7r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.12 c369c340-eb2d-459f-ad88-6f2c969b2177 default }" containerID=2ed4a37e1ba5235420e16cf73b7bbbe2997c004b5e1e6f326cc789d906cde2b0 datapathConfiguration="&{false false false false false }" interface=lxc643d7ac42a4e k8sPodName=cert-manager/cert-manager-startupapicheck-p2s5l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ed4a37e1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p2s5l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ed4a37e1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=703085c5-4bbc-452d-94bd-c10dcd3fcc0c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=703085c5-4bbc-452d-94bd-c10dcd3fcc0c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p2s5l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=703085c5-4bbc-452d-94bd-c10dcd3fcc0c;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=703085c5-4bbc-452d-94bd-c10dcd3fcc0c;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ed4a37e1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identity=33499 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=703085c5-4bbc-452d-94bd-c10dcd3fcc0c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=703085c5-4bbc-452d-94bd-c10dcd3fcc0c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p2s5l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ed4a37e1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identity=33499 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p2s5l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ed4a37e1b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2213 identity=33499 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p2s5l subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ed4a37e1b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2213 identity=33499 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p2s5l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2ed4a37e1b endpointID=2213 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-p2s5l subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=703085c5-4bbc-452d-94bd-c10dcd3fcc0c k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=703085c5-4bbc-452d-94bd-c10dcd3fcc0c k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=2ed4a37e1b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2213 identity=33499 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p2s5l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 084c2d26-71e9-4256-b5ce-8a58a609565e default }" containerID=358d9edce3a2cc760d6a85638f5f4903dad74576fbe2f95832fcf413d17d3e1c datapathConfiguration="&{false false false false false }" interface=lxc2106bbe54e10 k8sPodName=ingress-nginx/ingress-nginx-admission-create-xlbr5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=358d9edce3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xlbr5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=358d9edce3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d00ce771-342e-4096-9aea-780fc9534b45,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=d00ce771-342e-4096-9aea-780fc9534b45,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xlbr5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=d00ce771-342e-4096-9aea-780fc9534b45;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=d00ce771-342e-4096-9aea-780fc9534b45;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=358d9edce3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xlbr5 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=358d9edce3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 identity=9833 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d00ce771-342e-4096-9aea-780fc9534b45,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=d00ce771-342e-4096-9aea-780fc9534b45,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xlbr5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=358d9edce3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 identity=9833 ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xlbr5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=358d9edce3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1974 identity=9833 ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xlbr5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=358d9edce3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1974 identity=9833 ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xlbr5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=358d9edce3 endpointID=1974 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-xlbr5 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=d00ce771-342e-4096-9aea-780fc9534b45 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=d00ce771-342e-4096-9aea-780fc9534b45 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=358d9edce3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1974 identity=9833 ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xlbr5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 8e9553a6-9859-4f37-8619-d602880f7f02 default }" containerID=9a73038a8abcbe82c196ba41f42b392d82975433972078bd9fb29cbc89aeb01c datapathConfiguration="&{false false false false false }" interface=lxc66c671b37124 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8kcg7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a73038a8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8kcg7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a73038a8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8kcg7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9a73038a8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8kcg7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a73038a8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 identity=4251 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8kcg7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a73038a8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 identity=4251 ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8kcg7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a73038a8a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=775 identity=4251 ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8kcg7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a73038a8a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=775 identity=4251 ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8kcg7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.94 c403d8da-a453-427d-ae22-c441bd5cc3ae default }" containerID=d4f811e1d43318aa74ecb5128112504ad719848b242d77762517f3c903927757 datapathConfiguration="&{false false false false false }" interface=lxc5c918a6e0b5b k8sPodName=ingress-nginx/ingress-nginx-admission-patch-frl7k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4f811e1d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-frl7k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4f811e1d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4909cee7-9841-4d92-a264-4e5bff21d076,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=4909cee7-9841-4d92-a264-4e5bff21d076,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-frl7k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=4909cee7-9841-4d92-a264-4e5bff21d076;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=4909cee7-9841-4d92-a264-4e5bff21d076;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4f811e1d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=1254 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4909cee7-9841-4d92-a264-4e5bff21d076,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=4909cee7-9841-4d92-a264-4e5bff21d076,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-frl7k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4f811e1d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=1254 ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-frl7k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4f811e1d4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=866 identity=1254 ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-frl7k subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4f811e1d4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=866 identity=1254 ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-frl7k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d4f811e1d4 endpointID=866 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-frl7k subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=4909cee7-9841-4d92-a264-4e5bff21d076 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=4909cee7-9841-4d92-a264-4e5bff21d076 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=d4f811e1d4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=866 identity=1254 ipv4=10.0.0.94 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-frl7k subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=43cc452a-2e99-44a2-9622-a39d4947b324] Description:}]" policyAddRequest=97eff2fd-8f2c-49af-b003-b2700400fc29 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=97eff2fd-8f2c-49af-b003-b2700400fc29 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c0848131-9716-4efe-958c-36a1e2153ce3] Description:}]" policyAddRequest=bb527c2c-f8d2-4ba0-80cc-79ca8a983eea subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=bb527c2c-f8d2-4ba0-80cc-79ca8a983eea policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.240 25ed5d12-51f4-4373-b9fc-015e2503bda6 default }" containerID=f546676f0dd19823f345800fba8423ed4344c05907152efd9b3297ee54dcec34 datapathConfiguration="&{false false false false false }" interface=lxc3022d02fda62 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-sscz2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f546676f0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-sscz2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f546676f0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-sscz2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.152 050d04fa-3ad1-4c44-ad1c-dd18d88e74f3 default }" containerID=45af6cc3901f3e06db72232cea3c0ec144376c2d0313fba2753fdd22774f8e2f datapathConfiguration="&{false false false false false }" interface=lxcd2c63535a4be k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-n2rvl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45af6cc390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1563 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-n2rvl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45af6cc390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1563 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-n2rvl subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f546676f0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 identity=17018 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-sscz2 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=f546676f0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 identity=17018 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-sscz2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=45af6cc390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1563 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-n2rvl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45af6cc390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1563 identity=16797 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-n2rvl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45af6cc390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1563 identity=16797 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-n2rvl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45af6cc390 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1563 identity=16797 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-n2rvl subsys=endpoint level=info msg="Successful endpoint creation" containerID=45af6cc390 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1563 identity=16797 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-n2rvl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f546676f0d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3528 identity=17018 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-sscz2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f546676f0d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3528 identity=17018 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-sscz2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.65 d2684c68-5caa-485c-b07b-1f7365782503 default }" containerID=ea6c8803dae3b95494da1205f7e4c4aa5de343343c59dd86c55e8d6e92968d80 datapathConfiguration="&{false false false false false }" interface=lxc92c0404188b6 k8sPodName=openstack/pxc-operator-7cff949c8b-8zhht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea6c8803da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8zhht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea6c8803da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8zhht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea6c8803da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 identity=6391 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8zhht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea6c8803da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 identity=6391 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8zhht subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ea6c8803da datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3164 identity=6391 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8zhht subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea6c8803da datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3164 identity=6391 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8zhht subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.49 b7b208da-a1ee-4f84-94fe-c518d702d151 default }" containerID=74df8aca4f6f0efe5d6320802bfc644569d836e9c288da382cda5dfa4b6e433c datapathConfiguration="&{false false false false false }" interface=lxcccf1f84a4c02 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74df8aca4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3804 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74df8aca4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3804 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=74df8aca4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3804 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74df8aca4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3804 identity=20680 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74df8aca4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3804 identity=20680 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 ad185190-d714-4ade-ab16-187d629eb2c8 default }" containerID=cde2b7699125b2c5bee67dec17972d1b70bde17de3d61fb9043d457bae678ea0 datapathConfiguration="&{false false false false false }" interface=lxc741306020705 k8sPodName=local-path-storage/helper-pod-create-pvc-0b502847-5347-4b35-a891-fb7fc4636c2e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cde2b76991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b502847-5347-4b35-a891-fb7fc4636c2e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cde2b76991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b502847-5347-4b35-a891-fb7fc4636c2e subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cde2b76991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 identity=60226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b502847-5347-4b35-a891-fb7fc4636c2e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cde2b76991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 identity=60226 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b502847-5347-4b35-a891-fb7fc4636c2e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74df8aca4f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3804 identity=20680 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=74df8aca4f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3804 identity=20680 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cde2b76991 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3691 identity=60226 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b502847-5347-4b35-a891-fb7fc4636c2e subsys=endpoint level=info msg="Successful endpoint creation" containerID=cde2b76991 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3691 identity=60226 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b502847-5347-4b35-a891-fb7fc4636c2e subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cde2b76991 endpointID=3691 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0b502847-5347-4b35-a891-fb7fc4636c2e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cde2b76991 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3691 identity=60226 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b502847-5347-4b35-a891-fb7fc4636c2e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 41d74bd0-496e-40f3-87e7-5677a7bec820 default }" containerID=36170ae71ef4c82f9859489fe2c46a2595f1d4b9c7a8c13919be29696299fdb1 datapathConfiguration="&{false false false false false }" interface=lxc316b9b0d34ea k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36170ae71e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3474 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36170ae71e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3474 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=36170ae71e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3474 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.180 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36170ae71e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3474 identity=2740 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36170ae71e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3474 identity=2740 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36170ae71e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3474 identity=2740 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=36170ae71e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3474 identity=2740 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=42f4075e-8b26-4553-9710-4e518b967ceb] Description:}]" policyAddRequest=01019af1-7a0f-47ae-9393-8ca8a6eb5673 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=01019af1-7a0f-47ae-9393-8ca8a6eb5673 policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.36 6d3e97da-6fec-4b8d-9923-621e802be16c default }" containerID=7db84d1742549d13a76221be42228dfca91dd70202583902d3648c8dbe6df2d7 datapathConfiguration="&{false false false false false }" interface=lxcdafc58059993 k8sPodName=local-path-storage/helper-pod-create-pvc-a7e4c0dc-a874-4286-a8ff-fc48394451e8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7db84d1742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7e4c0dc-a874-4286-a8ff-fc48394451e8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7db84d1742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7e4c0dc-a874-4286-a8ff-fc48394451e8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7db84d1742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 identity=60226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7e4c0dc-a874-4286-a8ff-fc48394451e8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7db84d1742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 identity=60226 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7e4c0dc-a874-4286-a8ff-fc48394451e8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7db84d1742 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1477 identity=60226 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7e4c0dc-a874-4286-a8ff-fc48394451e8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7db84d1742 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1477 identity=60226 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7e4c0dc-a874-4286-a8ff-fc48394451e8 subsys=daemon level=info msg="Delete endpoint request" containerID=7db84d1742 endpointID=1477 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a7e4c0dc-a874-4286-a8ff-fc48394451e8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7db84d1742 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1477 identity=60226 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7e4c0dc-a874-4286-a8ff-fc48394451e8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 1de7e19f-2dfa-42e0-ad8d-4eb0c2b2f984 default }" containerID=be39e3a17cc7b90cffe389f7b82965016a36cef3c34f8a9b0b49af9d8eddc508 datapathConfiguration="&{false false false false false }" interface=lxc90762d06d733 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be39e3a17c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be39e3a17c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be39e3a17c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 identity=27413 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be39e3a17c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 identity=27413 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be39e3a17c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=917 identity=27413 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=be39e3a17c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=917 identity=27413 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=13693079-9601-4698-941b-ab495854f163] Description:}]" policyAddRequest=d680b78b-fda7-4485-a6f5-43aed6d2d9ef subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d680b78b-fda7-4485-a6f5-43aed6d2d9ef policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.193 995bae19-5683-484c-8a36-16cfef4b22a2 default }" containerID=a176b10ad87d0eea08fc4ad72a7aff827f7519be7c2e03107d2830c19d5a3d6f datapathConfiguration="&{false false false false false }" interface=lxceadfbfc179a7 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a176b10ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a176b10ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a176b10ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=9355 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a176b10ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=9355 ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a176b10ad8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=880 identity=9355 ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a176b10ad8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=880 identity=9355 ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.0108485397757247 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.138 d8101bb8-13f6-4846-b4b8-e316ed4e39ba default }" containerID=3c3d5c38c029d170ba324417d2f61e15de392d1cdd75a60a2df9f624fbed1078 datapathConfiguration="&{false false false false false }" interface=lxc8abe44cc14bc k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-d8f9x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c3d5c38c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-d8f9x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c3d5c38c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-d8f9x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3c3d5c38c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-d8f9x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c3d5c38c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identity=54614 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-d8f9x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c3d5c38c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identity=54614 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-d8f9x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 e0804897-96c2-4c64-af62-9b2cc905d55c default }" containerID=89e4044886dac521d60a1dc8be05149e4020a1989b4899588eb26ae8e92fd905 datapathConfiguration="&{false false false false false }" interface=lxcbcadf6ce1307 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22fhz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89e4044886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2171 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22fhz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89e4044886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2171 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22fhz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89e4044886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2171 identity=27687 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22fhz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89e4044886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2171 identity=27687 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22fhz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c3d5c38c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=86 identity=54614 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-d8f9x subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c3d5c38c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=86 identity=54614 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-d8f9x subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.90 ba063dfb-6385-4d92-abf8-25e1ee462be2 default }" containerID=0df43b72ebd0a4444b59cf1a5ad082d1d40fd2deeb1710341c8a3d2b7597b8f5 datapathConfiguration="&{false false false false false }" interface=lxc7202b4667d45 k8sPodName=monitoring/node-feature-discovery-worker-tnj8c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0df43b72eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tnj8c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0df43b72eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tnj8c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0df43b72eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=61175 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tnj8c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0df43b72eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=61175 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tnj8c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89e4044886 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2171 identity=27687 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22fhz subsys=endpoint level=info msg="Successful endpoint creation" containerID=89e4044886 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2171 identity=27687 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22fhz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0df43b72eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=101 identity=61175 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tnj8c subsys=endpoint level=info msg="Successful endpoint creation" containerID=0df43b72eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=101 identity=61175 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tnj8c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 6a1f1279-68ba-435d-915b-d2a958756368 default }" containerID=9bbc44e9d6c22b6f110ff797731d236139a477dbf9748a8f3a403266d6720fb9 datapathConfiguration="&{false false false false false }" interface=lxcb337f59b9216 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xnx7q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bbc44e9d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xnx7q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bbc44e9d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xnx7q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9bbc44e9d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identity=9470 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xnx7q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bbc44e9d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identity=9470 ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xnx7q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9bbc44e9d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1042 identity=9470 ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xnx7q subsys=endpoint level=info msg="Successful endpoint creation" containerID=9bbc44e9d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1042 identity=9470 ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xnx7q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=612 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00612 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00612 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00612 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00612:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=612 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 812172e6-d428-42cf-b517-e1fa5e6aa19c default }" containerID=e201339e46a8520151dc14d9e13db648aa6249a7767f33fe3a1b5410ba1b9553 datapathConfiguration="&{false false false false false }" interface=lxc832f689a81c4 k8sPodName=monitoring/kube-prometheus-stack-admission-create-4lx2l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e201339e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4lx2l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e201339e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=a3c97672-e7e1-485d-8694-6051b2e552da,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a3c97672-e7e1-485d-8694-6051b2e552da,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4lx2l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=a3c97672-e7e1-485d-8694-6051b2e552da;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=a3c97672-e7e1-485d-8694-6051b2e552da;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e201339e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 identity=36688 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=a3c97672-e7e1-485d-8694-6051b2e552da,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a3c97672-e7e1-485d-8694-6051b2e552da,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4lx2l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e201339e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 identity=36688 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4lx2l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e201339e46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2734 identity=36688 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4lx2l subsys=endpoint level=info msg="Successful endpoint creation" containerID=e201339e46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2734 identity=36688 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4lx2l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e201339e46 endpointID=2734 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-4lx2l subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=a3c97672-e7e1-485d-8694-6051b2e552da k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=a3c97672-e7e1-485d-8694-6051b2e552da k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e201339e46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2734 identity=36688 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4lx2l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 fba52364-1ed0-4137-85be-cc52805b4925 default }" containerID=51213420d6104786861eedfc7bd084880076d0d2e138446bd84947864e511841 datapathConfiguration="&{false false false false false }" interface=lxc401c49ada49a k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5g5k9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51213420d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5g5k9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51213420d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5g5k9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=51213420d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identity=55449 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5g5k9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51213420d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identity=55449 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5g5k9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 52179176-4030-4294-b05d-8e2cf39a018c default }" containerID=2fbb066b2effa1049b0dc30f7a4e9b3f40f86bd1bd0b1bbf92e5f4beeec09434 datapathConfiguration="&{false false false false false }" interface=lxcd25677791886 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-l826g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fbb066b2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-l826g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fbb066b2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-l826g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fbb066b2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identity=14973 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-l826g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fbb066b2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identity=14973 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-l826g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51213420d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1856 identity=55449 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5g5k9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=51213420d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1856 identity=55449 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5g5k9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2fbb066b2e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=808 identity=14973 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-l826g subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fbb066b2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=808 identity=14973 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-l826g subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.120 1d4a1324-b738-4e3e-a283-b6326d649e9b default }" containerID=65e12a6dd177af3789d6563125357fdc1ba256dc2e2f5d36e00eef1eab0ab9bb datapathConfiguration="&{false false false false false }" interface=lxccf68032d19d8 k8sPodName=monitoring/kube-prometheus-stack-grafana-6fbb97b754-q8vdj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65e12a6dd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1324 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fbb97b754-q8vdj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65e12a6dd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1324 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fbb97b754-q8vdj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65e12a6dd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1324 identity=44871 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fbb97b754-q8vdj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65e12a6dd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1324 identity=44871 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fbb97b754-q8vdj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65e12a6dd1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1324 identity=44871 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fbb97b754-q8vdj subsys=endpoint level=info msg="Successful endpoint creation" containerID=65e12a6dd1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1324 identity=44871 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fbb97b754-q8vdj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.68 abb61ba0-4175-4d86-864f-7465937e8b28 default }" containerID=6c24f4f532209749d5dff81af745ee3485eec0b3e4e358bee61781eb59fb01c9 datapathConfiguration="&{false false false false false }" interface=lxc7b269ac821fb k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lvmw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c24f4f532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lvmw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c24f4f532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=3ffd4bff-0c42-4e27-ac75-2d8cc9a02830,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=3ffd4bff-0c42-4e27-ac75-2d8cc9a02830,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lvmw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=3ffd4bff-0c42-4e27-ac75-2d8cc9a02830;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=3ffd4bff-0c42-4e27-ac75-2d8cc9a02830;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c24f4f532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identity=38675 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=3ffd4bff-0c42-4e27-ac75-2d8cc9a02830,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=3ffd4bff-0c42-4e27-ac75-2d8cc9a02830,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lvmw4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c24f4f532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identity=38675 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lvmw4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c24f4f532 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1107 identity=38675 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lvmw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c24f4f532 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1107 identity=38675 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lvmw4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 78333c80-e092-4abe-b40b-f8c3fc1f7fe3 default }" containerID=cbcbffcc62052d0ce0d32f564802fe7a9f6efb6eab083ab71ef07ee70125113a datapathConfiguration="&{false false false false false }" interface=lxc1338a32b2001 k8sPodName=local-path-storage/helper-pod-create-pvc-96a26ad8-54ff-4b8f-8e65-8c1ac73b1393 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbcbffcc62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96a26ad8-54ff-4b8f-8e65-8c1ac73b1393 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cbcbffcc62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96a26ad8-54ff-4b8f-8e65-8c1ac73b1393 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cbcbffcc62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identity=60226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96a26ad8-54ff-4b8f-8e65-8c1ac73b1393 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbcbffcc62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identity=60226 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96a26ad8-54ff-4b8f-8e65-8c1ac73b1393 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cbcbffcc62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3550 identity=60226 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96a26ad8-54ff-4b8f-8e65-8c1ac73b1393 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbcbffcc62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3550 identity=60226 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96a26ad8-54ff-4b8f-8e65-8c1ac73b1393 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.72 a442819d-e9dc-4f3d-b1de-d8e01000ecd4 default }" containerID=a8cf90a2df97206eecf6bf24219523203f4696a7106376c04cb518d5fbb26713 datapathConfiguration="&{false false false false false }" interface=lxc98871fb57333 k8sPodName=local-path-storage/helper-pod-create-pvc-3865cf82-96f3-4366-9483-41b1520b7acf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8cf90a2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3865cf82-96f3-4366-9483-41b1520b7acf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8cf90a2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3865cf82-96f3-4366-9483-41b1520b7acf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a8cf90a2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identity=60226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3865cf82-96f3-4366-9483-41b1520b7acf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8cf90a2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identity=60226 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3865cf82-96f3-4366-9483-41b1520b7acf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8cf90a2df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1259 identity=60226 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3865cf82-96f3-4366-9483-41b1520b7acf subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8cf90a2df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1259 identity=60226 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3865cf82-96f3-4366-9483-41b1520b7acf subsys=daemon level=info msg="Delete endpoint request" containerID=6c24f4f532 endpointID=1107 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-lvmw4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=3ffd4bff-0c42-4e27-ac75-2d8cc9a02830 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=3ffd4bff-0c42-4e27-ac75-2d8cc9a02830 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6c24f4f532 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1107 identity=38675 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lvmw4 subsys=endpoint level=info msg="Delete endpoint request" containerID=a8cf90a2df endpointID=1259 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3865cf82-96f3-4366-9483-41b1520b7acf subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=cbcbffcc62 endpointID=3550 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-96a26ad8-54ff-4b8f-8e65-8c1ac73b1393 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a8cf90a2df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1259 identity=60226 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3865cf82-96f3-4366-9483-41b1520b7acf subsys=endpoint level=info msg="Removed endpoint" containerID=cbcbffcc62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3550 identity=60226 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96a26ad8-54ff-4b8f-8e65-8c1ac73b1393 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 3c50b0f7-d5f1-45fe-840b-99f9df3b6b6b default }" containerID=01f62cc53e3c611c90f56e7de3b3f9ffcb8244a6e5481fbaf7994662b82c9709 datapathConfiguration="&{false false false false false }" interface=lxc7875252ab15d k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01f62cc53e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01f62cc53e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01f62cc53e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identity=9806 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01f62cc53e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identity=9806 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01f62cc53e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1868 identity=9806 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=01f62cc53e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1868 identity=9806 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.213 9ff830a8-b2d3-4fc7-b693-f20fada57040 default }" containerID=149615513e55092872645fa0d4e9305e84cba002056932fdc0d7772d14ec33eb datapathConfiguration="&{false false false false false }" interface=lxcda112171e1c5 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=149615513e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3647 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=149615513e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3647 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=149615513e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3647 identity=39064 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=149615513e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3647 identity=39064 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=149615513e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3647 identity=39064 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=149615513e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3647 identity=39064 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.12 98fa1a2e-6d48-442b-8317-871c98b0e544 default }" containerID=8cb9447c90008006af76a633b6410b2bef60ea40e0ac043567c298f3af5694b0 datapathConfiguration="&{false false false false false }" interface=lxc974c1af350e2 k8sPodName=monitoring/loki-gateway-cf54cb88c-bhrbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8cb9447c90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=842 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bhrbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8cb9447c90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=842 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bhrbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8cb9447c90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=842 identity=785 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bhrbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8cb9447c90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=842 identity=785 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bhrbm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 22879946-4315-4377-af34-837274981d81 default }" containerID=abea522e4af346877f64c9feee39a0f72ec287b9a8cbc1889e049587048436d4 datapathConfiguration="&{false false false false false }" interface=lxc22208e652ff4 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abea522e4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abea522e4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.199 f4314f0b-1640-47fe-ac71-249749f826d2 default }" containerID=e90898afe2d51a491ed21db16040cdb51f7963858a8f3d2d5ef0ac3f82f77d7c datapathConfiguration="&{false false false false false }" interface=lxc7e5a8380292a k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e90898afe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e90898afe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abea522e4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identity=33162 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abea522e4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identity=33162 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e90898afe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identity=14616 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e90898afe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identity=14616 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8cb9447c90 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=842 identity=785 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bhrbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=8cb9447c90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=842 identity=785 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bhrbm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.87 a0eda81d-b44a-4071-b3e8-da22a21a2cc1 default }" containerID=bb2a4459aa7ad1a70ac04dd61d9544d975f3caa6839ef652df4ddead57f2526f datapathConfiguration="&{false false false false false }" interface=lxcc789d4f392cd k8sPodName=local-path-storage/helper-pod-create-pvc-b48ef164-e2ce-4315-a98a-43f4ba06ff05 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb2a4459aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b48ef164-e2ce-4315-a98a-43f4ba06ff05 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb2a4459aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b48ef164-e2ce-4315-a98a-43f4ba06ff05 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb2a4459aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 identity=60226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b48ef164-e2ce-4315-a98a-43f4ba06ff05 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb2a4459aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 identity=60226 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b48ef164-e2ce-4315-a98a-43f4ba06ff05 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e90898afe2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=434 identity=14616 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e90898afe2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=434 identity=14616 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=abea522e4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1655 identity=33162 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=abea522e4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1655 identity=33162 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bb2a4459aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2193 identity=60226 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b48ef164-e2ce-4315-a98a-43f4ba06ff05 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb2a4459aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2193 identity=60226 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b48ef164-e2ce-4315-a98a-43f4ba06ff05 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.163 d8dfdfe3-12de-4a8b-975c-daa7451f6b7a default }" containerID=7c3f0fa5e96c19eb2029754747a5a40aaf64a6c74ca86c725096783a422bcadb datapathConfiguration="&{false false false false false }" interface=lxcab2f919462ab k8sPodName=monitoring/vector-f6t2p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c3f0fa5e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2520 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/vector-f6t2p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c3f0fa5e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2520 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/vector-f6t2p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c3f0fa5e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2520 identity=24871 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/vector-f6t2p oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7c3f0fa5e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2520 identity=24871 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/vector-f6t2p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c3f0fa5e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2520 identity=24871 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/vector-f6t2p subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c3f0fa5e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2520 identity=24871 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/vector-f6t2p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb2a4459aa endpointID=2193 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b48ef164-e2ce-4315-a98a-43f4ba06ff05 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bb2a4459aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2193 identity=60226 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b48ef164-e2ce-4315-a98a-43f4ba06ff05 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 4d7585d3-9f91-4bc8-8041-d8500543f1c0 default }" containerID=1c770cb45ce5f539904d596861813acc38b9b52a04d77188db00c0eec6813334 datapathConfiguration="&{false false false false false }" interface=lxc4c8f8ee73312 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c770cb45c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c770cb45c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1c770cb45c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c770cb45c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 identity=47652 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c770cb45c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 identity=47652 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c770cb45c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2858 identity=47652 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c770cb45c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2858 identity=47652 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.1 2ab99d4d-dd7c-4e38-8aa5-1acedb5a8131 default }" containerID=22123de145ea288f8ad1896e0567df483a6692904d65523ac9dc7188a45e8ae1 datapathConfiguration="&{false false false false false }" interface=lxcaa0e74f15b31 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-9xp4d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22123de145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-9xp4d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22123de145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-9xp4d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22123de145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identity=6987 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-9xp4d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22123de145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identity=6987 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-9xp4d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22123de145 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=354 identity=6987 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-9xp4d subsys=endpoint level=info msg="Successful endpoint creation" containerID=22123de145 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=354 identity=6987 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-9xp4d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.41 9c859800-dada-4fe9-a2bc-7bdc4eff6944 default }" containerID=979fb2c1910cdc2934a6d9b3279650f08b5a5ed2f1c287407dad4d5eb7102f31 datapathConfiguration="&{false false false false false }" interface=lxc66a9d0011d22 k8sPodName=openstack/memcached-memcached-6479589586-dhkhc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=979fb2c191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-dhkhc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=979fb2c191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-dhkhc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=979fb2c191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 identity=28996 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-dhkhc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=979fb2c191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 identity=28996 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-dhkhc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=979fb2c191 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=495 identity=28996 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-dhkhc subsys=endpoint level=info msg="Successful endpoint creation" containerID=979fb2c191 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=495 identity=28996 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-dhkhc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.201 c0353d56-7d76-4b40-a432-527d168ce16b default }" containerID=a1616a872a28c1b4e632d59ee22be946c8237cd9849eb4ae863c719e742b047d datapathConfiguration="&{false false false false false }" interface=lxc98158adcae2f k8sPodName=local-path-storage/helper-pod-create-pvc-3963ef8f-4c04-4bff-98ef-f01e3efc93df labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1616a872a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3963ef8f-4c04-4bff-98ef-f01e3efc93df subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1616a872a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3963ef8f-4c04-4bff-98ef-f01e3efc93df subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1616a872a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=60226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3963ef8f-4c04-4bff-98ef-f01e3efc93df oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1616a872a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=60226 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3963ef8f-4c04-4bff-98ef-f01e3efc93df subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1616a872a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=976 identity=60226 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3963ef8f-4c04-4bff-98ef-f01e3efc93df subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1616a872a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=976 identity=60226 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3963ef8f-4c04-4bff-98ef-f01e3efc93df subsys=daemon level=info msg="Delete endpoint request" containerID=a1616a872a endpointID=976 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3963ef8f-4c04-4bff-98ef-f01e3efc93df subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a1616a872a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=976 identity=60226 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3963ef8f-4c04-4bff-98ef-f01e3efc93df subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 5a08ce18-e3e0-4ba5-86cd-43a1e922657a default }" containerID=27a2f985e4474dd13ff839a53723ae6995996a19a6e6942402820faff1229385 datapathConfiguration="&{false false false false false }" interface=lxc6764920b0ba1 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27a2f985e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27a2f985e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=27a2f985e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27a2f985e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=38375 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27a2f985e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=38375 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=27a2f985e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=660 identity=38375 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=27a2f985e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=660 identity=38375 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.202 a135ab39-b2fa-4e9f-85e0-47136c7d1d0e default }" containerID=07b2dfdbc552b07144f4b9e860c4beb8c963b0ac184192c42ffeed2d2a9a45d7 datapathConfiguration="&{false false false false false }" interface=lxcac680c5098dc k8sPodName=openstack/keystone-api-547557bb5b-99pdk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07b2dfdbc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-api-547557bb5b-99pdk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07b2dfdbc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-api-547557bb5b-99pdk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=07b2dfdbc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-api-547557bb5b-99pdk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07b2dfdbc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 identity=24240 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-api-547557bb5b-99pdk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07b2dfdbc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 identity=24240 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-api-547557bb5b-99pdk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 b3c887ca-2c05-4a92-bf07-49eef343a6cc default }" containerID=065a372822ab3dbb6936ef46dd3afe8541e90ad73525f3a5ae86f266f4f9a0ef datapathConfiguration="&{false false false false false }" interface=lxc309a46506199 k8sPodName=openstack/keystone-credential-setup-l4g2s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=065a372822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-credential-setup-l4g2s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=065a372822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=206907a3-70b8-43d6-ac79-9b2616ceb482,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=206907a3-70b8-43d6-ac79-9b2616ceb482,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-credential-setup-l4g2s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=206907a3-70b8-43d6-ac79-9b2616ceb482;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=206907a3-70b8-43d6-ac79-9b2616ceb482;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=065a372822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identity=12792 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=206907a3-70b8-43d6-ac79-9b2616ceb482,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=206907a3-70b8-43d6-ac79-9b2616ceb482,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-credential-setup-l4g2s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=065a372822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identity=12792 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-credential-setup-l4g2s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=07b2dfdbc5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2525 identity=24240 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-api-547557bb5b-99pdk subsys=endpoint level=info msg="Successful endpoint creation" containerID=07b2dfdbc5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2525 identity=24240 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-api-547557bb5b-99pdk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=065a372822 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=97 identity=12792 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-credential-setup-l4g2s subsys=endpoint level=info msg="Successful endpoint creation" containerID=065a372822 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=97 identity=12792 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-credential-setup-l4g2s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=065a372822 endpointID=97 k8sNamespace=openstack k8sPodName=keystone-credential-setup-l4g2s subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=206907a3-70b8-43d6-ac79-9b2616ceb482 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=206907a3-70b8-43d6-ac79-9b2616ceb482 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=065a372822 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=97 identity=12792 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-credential-setup-l4g2s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 af66f6dd-a47a-4db3-8e90-998a5b6b7306 default }" containerID=1b53423f782aa6349419935740ba7db4f5a2b0adcd989e867dc9bdc8eea23888 datapathConfiguration="&{false false false false false }" interface=lxc2f9f93ea31c6 k8sPodName=openstack/keystone-db-init-2t5f5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b53423f78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-init-2t5f5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b53423f78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=000dcc26-679a-411a-9fcb-e7b19726e847,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=000dcc26-679a-411a-9fcb-e7b19726e847,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-init-2t5f5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=000dcc26-679a-411a-9fcb-e7b19726e847;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=000dcc26-679a-411a-9fcb-e7b19726e847;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b53423f78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identity=3796 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=000dcc26-679a-411a-9fcb-e7b19726e847,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=000dcc26-679a-411a-9fcb-e7b19726e847,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-init-2t5f5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b53423f78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identity=3796 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-init-2t5f5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1b53423f78 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1916 identity=3796 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-init-2t5f5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b53423f78 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1916 identity=3796 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-init-2t5f5 subsys=daemon level=info msg="Delete endpoint request" containerID=1b53423f78 endpointID=1916 k8sNamespace=openstack k8sPodName=keystone-db-init-2t5f5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=000dcc26-679a-411a-9fcb-e7b19726e847 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=000dcc26-679a-411a-9fcb-e7b19726e847 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1b53423f78 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1916 identity=3796 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-init-2t5f5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 99ca7b42-e60e-4b9b-bbdc-128b282b0e81 default }" containerID=a885ccb80494d0c067ab96efae641227c518c861b940394527d4e2c35d2ea35f datapathConfiguration="&{false false false false false }" interface=lxcedd614d36364 k8sPodName=openstack/keystone-fernet-setup-7rk88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a885ccb804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-fernet-setup-7rk88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a885ccb804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=44ec3788-ec80-483e-89fe-c1cda76ea67e,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=44ec3788-ec80-483e-89fe-c1cda76ea67e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-fernet-setup-7rk88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a885ccb804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-fernet-setup-7rk88 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=44ec3788-ec80-483e-89fe-c1cda76ea67e;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=44ec3788-ec80-483e-89fe-c1cda76ea67e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a885ccb804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=6426 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=44ec3788-ec80-483e-89fe-c1cda76ea67e,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=44ec3788-ec80-483e-89fe-c1cda76ea67e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-fernet-setup-7rk88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a885ccb804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=6426 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-fernet-setup-7rk88 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a885ccb804 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=412 identity=6426 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-fernet-setup-7rk88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a885ccb804 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=412 identity=6426 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-fernet-setup-7rk88 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a885ccb804 endpointID=412 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-7rk88 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=44ec3788-ec80-483e-89fe-c1cda76ea67e k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=44ec3788-ec80-483e-89fe-c1cda76ea67e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a885ccb804 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=412 identity=6426 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-fernet-setup-7rk88 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 abc9488c-0e28-4aae-bfaa-e1c08997cc73 default }" containerID=390d481073ccd4ef206fa0c60d96189eada8ccb93b6890f7153ab76c64349d02 datapathConfiguration="&{false false false false false }" interface=lxc86272787ee34 k8sPodName=openstack/keystone-db-sync-85q9g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=390d481073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-sync-85q9g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=390d481073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4d4b3e11-20ff-4e8d-a09d-12c3fab970bd,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4d4b3e11-20ff-4e8d-a09d-12c3fab970bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-sync-85q9g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4d4b3e11-20ff-4e8d-a09d-12c3fab970bd;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=4d4b3e11-20ff-4e8d-a09d-12c3fab970bd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=390d481073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-sync-85q9g line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=390d481073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identity=306 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4d4b3e11-20ff-4e8d-a09d-12c3fab970bd,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4d4b3e11-20ff-4e8d-a09d-12c3fab970bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-sync-85q9g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=390d481073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identity=306 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-sync-85q9g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=390d481073 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1810 identity=306 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-sync-85q9g subsys=endpoint level=info msg="Successful endpoint creation" containerID=390d481073 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1810 identity=306 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-sync-85q9g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=390d481073 endpointID=1810 k8sNamespace=openstack k8sPodName=keystone-db-sync-85q9g subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4d4b3e11-20ff-4e8d-a09d-12c3fab970bd k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=4d4b3e11-20ff-4e8d-a09d-12c3fab970bd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=390d481073 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1810 identity=306 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-sync-85q9g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 27f1e374-0726-4376-9073-467980b70ea4 default }" containerID=4429aa871bfa49d2f01ddf1c3638811c51123e8e616e4792057fce99e336c9c1 datapathConfiguration="&{false false false false false }" interface=lxc49f322c976c9 k8sPodName=openstack/keystone-rabbit-init-sbwjc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4429aa871b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-rabbit-init-sbwjc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4429aa871b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fdd17586-9749-4a15-a9ad-8eb3170c9783,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fdd17586-9749-4a15-a9ad-8eb3170c9783,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-rabbit-init-sbwjc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fdd17586-9749-4a15-a9ad-8eb3170c9783;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=fdd17586-9749-4a15-a9ad-8eb3170c9783;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4429aa871b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 identity=1293 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fdd17586-9749-4a15-a9ad-8eb3170c9783,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fdd17586-9749-4a15-a9ad-8eb3170c9783,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-rabbit-init-sbwjc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4429aa871b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 identity=1293 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-rabbit-init-sbwjc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4429aa871b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1803 identity=1293 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-rabbit-init-sbwjc subsys=endpoint level=info msg="Successful endpoint creation" containerID=4429aa871b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1803 identity=1293 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-rabbit-init-sbwjc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4429aa871b endpointID=1803 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-sbwjc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fdd17586-9749-4a15-a9ad-8eb3170c9783 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=fdd17586-9749-4a15-a9ad-8eb3170c9783 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4429aa871b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1803 identity=1293 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-rabbit-init-sbwjc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 c183e852-f716-416c-b74b-8b14a0390509 default }" containerID=94bbfa8d76d3beeee5e1360f2183f8b4eeb4d8d5752e2a176e011175904cc408 datapathConfiguration="&{false false false false false }" interface=lxc1242bc6d1a42 k8sPodName=openstack/keystone-domain-manage-6js9r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94bbfa8d76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1480 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-domain-manage-6js9r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94bbfa8d76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1480 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d0f54feb-6d68-42f5-8e66-2ca933971919,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d0f54feb-6d68-42f5-8e66-2ca933971919,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-domain-manage-6js9r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d0f54feb-6d68-42f5-8e66-2ca933971919;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=d0f54feb-6d68-42f5-8e66-2ca933971919;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94bbfa8d76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1480 identity=22875 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d0f54feb-6d68-42f5-8e66-2ca933971919,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d0f54feb-6d68-42f5-8e66-2ca933971919,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-domain-manage-6js9r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94bbfa8d76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1480 identity=22875 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-domain-manage-6js9r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=94bbfa8d76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1480 identity=22875 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-domain-manage-6js9r subsys=endpoint level=info msg="Successful endpoint creation" containerID=94bbfa8d76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1480 identity=22875 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-domain-manage-6js9r subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=94bbfa8d76 endpointID=1480 k8sNamespace=openstack k8sPodName=keystone-domain-manage-6js9r subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d0f54feb-6d68-42f5-8e66-2ca933971919 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=d0f54feb-6d68-42f5-8e66-2ca933971919 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=94bbfa8d76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1480 identity=22875 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-domain-manage-6js9r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 b34a1f02-8e26-40f2-81e0-f05b8f9afe70 default }" containerID=3fc3e56d0918f9ec10da8f9145d05b49105d89ca1c516288fc10ca793d5a9fb0 datapathConfiguration="&{false false false false false }" interface=lxc6377e841898d k8sPodName=openstack/keystone-bootstrap-mnpgw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3fc3e56d09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-bootstrap-mnpgw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3fc3e56d09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=697db68a-a77c-4a55-bdf9-5399e3e883ba,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=697db68a-a77c-4a55-bdf9-5399e3e883ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-bootstrap-mnpgw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=697db68a-a77c-4a55-bdf9-5399e3e883ba;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=697db68a-a77c-4a55-bdf9-5399e3e883ba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3fc3e56d09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 identity=6663 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=697db68a-a77c-4a55-bdf9-5399e3e883ba,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=697db68a-a77c-4a55-bdf9-5399e3e883ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-bootstrap-mnpgw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3fc3e56d09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 identity=6663 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-bootstrap-mnpgw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3fc3e56d09 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2135 identity=6663 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-bootstrap-mnpgw subsys=endpoint level=info msg="Successful endpoint creation" containerID=3fc3e56d09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2135 identity=6663 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-bootstrap-mnpgw subsys=daemon level=info msg="Delete endpoint request" containerID=3fc3e56d09 endpointID=2135 k8sNamespace=openstack k8sPodName=keystone-bootstrap-mnpgw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=697db68a-a77c-4a55-bdf9-5399e3e883ba k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=697db68a-a77c-4a55-bdf9-5399e3e883ba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3fc3e56d09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2135 identity=6663 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-bootstrap-mnpgw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 bc9029a2-ced1-4fc8-bb04-d4bc036f6514 default }" containerID=2439d6afc2f3153cb0077235f26c0cd8d7076c19140df04d02a754ceca673be7 datapathConfiguration="&{false false false false false }" interface=lxc47e9664246d1 k8sPodName=local-path-storage/helper-pod-create-pvc-29bedc56-0adf-4ad0-8f61-248951b9f799 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2439d6afc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29bedc56-0adf-4ad0-8f61-248951b9f799 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2439d6afc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29bedc56-0adf-4ad0-8f61-248951b9f799 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2439d6afc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 identity=60226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29bedc56-0adf-4ad0-8f61-248951b9f799 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2439d6afc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 identity=60226 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29bedc56-0adf-4ad0-8f61-248951b9f799 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2439d6afc2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=314 identity=60226 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29bedc56-0adf-4ad0-8f61-248951b9f799 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2439d6afc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=314 identity=60226 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29bedc56-0adf-4ad0-8f61-248951b9f799 subsys=daemon level=info msg="Delete endpoint request" containerID=2439d6afc2 endpointID=314 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-29bedc56-0adf-4ad0-8f61-248951b9f799 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2439d6afc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=314 identity=60226 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29bedc56-0adf-4ad0-8f61-248951b9f799 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 191e5ef5-423c-4533-80c1-00c19a793046 default }" containerID=4845c46900c63506b8599d4663b098fcfd62085dc03a3bf9ea9d91ce3cb3f8b6 datapathConfiguration="&{false false false false false }" interface=lxc0f844cb1f973 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4845c46900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=761 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4845c46900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=761 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4845c46900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=761 identity=64114 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4845c46900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=761 identity=64114 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4845c46900 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=761 identity=64114 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4845c46900 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=761 identity=64114 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.230 754bc55d-cf93-4069-a5d3-bcd1ac16ae53 default }" containerID=b0568bbb2c75e9e1161fc8d089dfed930495ad142306f9297a15dcf83abf10c5 datapathConfiguration="&{false false false false false }" interface=lxc92570e59c28d k8sPodName=openstack/barbican-api-846cf8d57c-58tk9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0568bbb2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-api-846cf8d57c-58tk9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0568bbb2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-api-846cf8d57c-58tk9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b0568bbb2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-api-846cf8d57c-58tk9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0568bbb2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 identity=30716 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-api-846cf8d57c-58tk9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0568bbb2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 identity=30716 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-api-846cf8d57c-58tk9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 be8ae1c9-5f23-4739-a220-f158cb5f4720 default }" containerID=414331ca1dc82a996ffa5ab71fa12535af57ee4031966ec1dbcd8f79849acfaf datapathConfiguration="&{false false false false false }" interface=lxcf87dc34b2adc k8sPodName=openstack/barbican-db-init-bhqhs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=414331ca1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-init-bhqhs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=414331ca1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=81ceb479-c3e6-47f1-bf92-ea778c027fc0,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=81ceb479-c3e6-47f1-bf92-ea778c027fc0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-init-bhqhs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=81ceb479-c3e6-47f1-bf92-ea778c027fc0;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=81ceb479-c3e6-47f1-bf92-ea778c027fc0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=414331ca1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identity=5416 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=81ceb479-c3e6-47f1-bf92-ea778c027fc0,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=81ceb479-c3e6-47f1-bf92-ea778c027fc0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-init-bhqhs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=414331ca1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identity=5416 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-init-bhqhs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0568bbb2c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1279 identity=30716 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-api-846cf8d57c-58tk9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0568bbb2c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1279 identity=30716 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-api-846cf8d57c-58tk9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=414331ca1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=451 identity=5416 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-init-bhqhs subsys=endpoint level=info msg="Successful endpoint creation" containerID=414331ca1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=451 identity=5416 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-init-bhqhs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=414331ca1d endpointID=451 k8sNamespace=openstack k8sPodName=barbican-db-init-bhqhs subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=81ceb479-c3e6-47f1-bf92-ea778c027fc0 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=81ceb479-c3e6-47f1-bf92-ea778c027fc0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=414331ca1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=451 identity=5416 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-init-bhqhs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 e6ad2fc5-1c9c-4961-871f-65714231a482 default }" containerID=36422dc5b876632e3e436c9bba273bf2ac4c1a547a67e69bb76da69f25239f3a datapathConfiguration="&{false false false false false }" interface=lxc7247e7fbf1ff k8sPodName=openstack/barbican-db-sync-rg4hl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36422dc5b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-sync-rg4hl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36422dc5b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=49833c41-1533-4af3-825d-45fe02587592,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=49833c41-1533-4af3-825d-45fe02587592,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-sync-rg4hl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=49833c41-1533-4af3-825d-45fe02587592;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=49833c41-1533-4af3-825d-45fe02587592;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36422dc5b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=6445 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=49833c41-1533-4af3-825d-45fe02587592,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=49833c41-1533-4af3-825d-45fe02587592,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-sync-rg4hl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36422dc5b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=6445 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-sync-rg4hl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36422dc5b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=108 identity=6445 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-sync-rg4hl subsys=endpoint level=info msg="Successful endpoint creation" containerID=36422dc5b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=108 identity=6445 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-sync-rg4hl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=36422dc5b8 endpointID=108 k8sNamespace=openstack k8sPodName=barbican-db-sync-rg4hl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=49833c41-1533-4af3-825d-45fe02587592 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=49833c41-1533-4af3-825d-45fe02587592 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=36422dc5b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=108 identity=6445 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-sync-rg4hl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 8af17b15-db05-4a22-b8c3-2b25a4c4963c default }" containerID=793014e5bde6ec06489b4ae8d6abd417fab9c7b47ab884814d85a6557c60bd5d datapathConfiguration="&{false false false false false }" interface=lxca6c5d25983ce k8sPodName=openstack/barbican-rabbit-init-hgnrd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=793014e5bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-hgnrd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=793014e5bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9f9ea910-7965-44c4-b888-d399980907dd,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9f9ea910-7965-44c4-b888-d399980907dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-hgnrd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9f9ea910-7965-44c4-b888-d399980907dd;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=9f9ea910-7965-44c4-b888-d399980907dd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=793014e5bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-hgnrd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=793014e5bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=13491 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9f9ea910-7965-44c4-b888-d399980907dd,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9f9ea910-7965-44c4-b888-d399980907dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-hgnrd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=793014e5bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=13491 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-hgnrd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=793014e5bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=351 identity=13491 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-hgnrd subsys=endpoint level=info msg="Successful endpoint creation" containerID=793014e5bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=351 identity=13491 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-hgnrd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=793014e5bd endpointID=351 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-hgnrd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9f9ea910-7965-44c4-b888-d399980907dd k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=9f9ea910-7965-44c4-b888-d399980907dd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=793014e5bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=351 identity=13491 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-hgnrd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 b9cdea4d-3959-45b9-b6e9-b06778ab5ecd default }" containerID=5afc5bad68a679eedd5555f85bc3afe7d592bb0789f93b464df686d30537888a datapathConfiguration="&{false false false false false }" interface=lxc78a275d9db6b k8sPodName=openstack/barbican-ks-service-mh68r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5afc5bad68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-service-mh68r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5afc5bad68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=707a3bf2-56c7-4a7d-a3a3-08138ac6f2c0,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=707a3bf2-56c7-4a7d-a3a3-08138ac6f2c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-service-mh68r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=707a3bf2-56c7-4a7d-a3a3-08138ac6f2c0;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=707a3bf2-56c7-4a7d-a3a3-08138ac6f2c0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5afc5bad68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=53131 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=707a3bf2-56c7-4a7d-a3a3-08138ac6f2c0,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=707a3bf2-56c7-4a7d-a3a3-08138ac6f2c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-service-mh68r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5afc5bad68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=53131 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-service-mh68r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5afc5bad68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=491 identity=53131 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-service-mh68r subsys=endpoint level=info msg="Successful endpoint creation" containerID=5afc5bad68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=491 identity=53131 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-service-mh68r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03616405372867829 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=5afc5bad68 endpointID=491 k8sNamespace=openstack k8sPodName=barbican-ks-service-mh68r subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=707a3bf2-56c7-4a7d-a3a3-08138ac6f2c0 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=707a3bf2-56c7-4a7d-a3a3-08138ac6f2c0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5afc5bad68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=491 identity=53131 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-service-mh68r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 2fc138a5-6365-493a-b8dc-ee4e9b90f742 default }" containerID=567308403c0aafadde06da31263a6ee3531d259091160558c9236cf553fbc120 datapathConfiguration="&{false false false false false }" interface=lxcd6b8666f03cd k8sPodName=openstack/barbican-ks-endpoints-f8c47 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=567308403c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-endpoints-f8c47 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=567308403c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ff88ff55-8adc-496f-a5ad-884670a16d60,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ff88ff55-8adc-496f-a5ad-884670a16d60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-endpoints-f8c47 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=567308403c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-endpoints-f8c47 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ff88ff55-8adc-496f-a5ad-884670a16d60;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=ff88ff55-8adc-496f-a5ad-884670a16d60;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=567308403c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identity=2572 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ff88ff55-8adc-496f-a5ad-884670a16d60,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ff88ff55-8adc-496f-a5ad-884670a16d60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-endpoints-f8c47 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=567308403c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identity=2572 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-endpoints-f8c47 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=567308403c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=183 identity=2572 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-endpoints-f8c47 subsys=endpoint level=info msg="Successful endpoint creation" containerID=567308403c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=183 identity=2572 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-endpoints-f8c47 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=567308403c endpointID=183 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-f8c47 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ff88ff55-8adc-496f-a5ad-884670a16d60 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=ff88ff55-8adc-496f-a5ad-884670a16d60 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=567308403c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=183 identity=2572 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-endpoints-f8c47 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 7f4506cb-8fba-4139-af70-27738ad0f56f default }" containerID=7af02523de24340623b59b7adfd5b5087c45b1ce8785868658bd1aa55aeee937 datapathConfiguration="&{false false false false false }" interface=lxc4055d67c2f2f k8sPodName=openstack/barbican-ks-user-t8rzb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7af02523de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-user-t8rzb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7af02523de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=af13c565-da7b-462c-b0fd-3b9869ef086b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=af13c565-da7b-462c-b0fd-3b9869ef086b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-user-t8rzb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=af13c565-da7b-462c-b0fd-3b9869ef086b;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=af13c565-da7b-462c-b0fd-3b9869ef086b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7af02523de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 identity=1180 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=af13c565-da7b-462c-b0fd-3b9869ef086b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=af13c565-da7b-462c-b0fd-3b9869ef086b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-user-t8rzb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7af02523de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 identity=1180 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-user-t8rzb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7af02523de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2401 identity=1180 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-user-t8rzb subsys=endpoint level=info msg="Successful endpoint creation" containerID=7af02523de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2401 identity=1180 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-user-t8rzb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7af02523de endpointID=2401 k8sNamespace=openstack k8sPodName=barbican-ks-user-t8rzb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=af13c565-da7b-462c-b0fd-3b9869ef086b k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=af13c565-da7b-462c-b0fd-3b9869ef086b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7af02523de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2401 identity=1180 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-user-t8rzb subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.222 715c1267-26ef-45b4-83eb-3b7825dae8d0 default }" containerID=35a832cf170bb2a2f8bc69c2ff7c078a6dff8e52e6e4d261525167f4ca977110 datapathConfiguration="&{false false false false false }" interface=lxc7c2d5642afd6 k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-pscm6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35a832cf17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-pscm6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35a832cf17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-pscm6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35a832cf17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identity=31952 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-pscm6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35a832cf17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identity=31952 ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-pscm6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=35a832cf17 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=214 identity=31952 ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-pscm6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=35a832cf17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=214 identity=31952 ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-pscm6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 86ec65c1-438d-47da-abe4-1de7afe02572 default }" containerID=1a2559754a5c808fc6a05310b2e421833ade7a6c4961698672fb8b38232ea55a datapathConfiguration="&{false false false false false }" interface=lxce0503d319a78 k8sPodName=openstack/rook-ceph-detect-version-9sn5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a2559754a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9sn5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a2559754a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=c5bcad62-bbd8-43fa-916c-529b14fcc597,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=c5bcad62-bbd8-43fa-916c-529b14fcc597,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9sn5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1a2559754a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9sn5t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=c5bcad62-bbd8-43fa-916c-529b14fcc597;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=c5bcad62-bbd8-43fa-916c-529b14fcc597;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a2559754a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identity=7109 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=c5bcad62-bbd8-43fa-916c-529b14fcc597,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=c5bcad62-bbd8-43fa-916c-529b14fcc597,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9sn5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a2559754a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identity=7109 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9sn5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a2559754a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=36 identity=7109 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9sn5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a2559754a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=36 identity=7109 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9sn5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1a2559754a endpointID=36 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-9sn5t subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=c5bcad62-bbd8-43fa-916c-529b14fcc597 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=c5bcad62-bbd8-43fa-916c-529b14fcc597 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=1a2559754a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=36 identity=7109 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9sn5t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 aa7b82c8-0d70-4ec0-9f94-2491782abaae default }" containerID=eaae85660ba35905560753f12c1ddd45d118a412e5abc161f0732fa9c74698d2 datapathConfiguration="&{false false false false false }" interface=lxc2ba63b6b27a0 k8sPodName=openstack/ceph-object-controller-detect-version-tkplk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eaae85660b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tkplk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eaae85660b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=ccd9d0c7-e874-4be2-ab24-42cf6cc0331e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=ccd9d0c7-e874-4be2-ab24-42cf6cc0331e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tkplk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=ccd9d0c7-e874-4be2-ab24-42cf6cc0331e;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=ccd9d0c7-e874-4be2-ab24-42cf6cc0331e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eaae85660b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identity=26890 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=ccd9d0c7-e874-4be2-ab24-42cf6cc0331e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=ccd9d0c7-e874-4be2-ab24-42cf6cc0331e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tkplk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eaae85660b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identity=26890 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tkplk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eaae85660b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=781 identity=26890 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tkplk subsys=endpoint level=info msg="Successful endpoint creation" containerID=eaae85660b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=781 identity=26890 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tkplk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eaae85660b endpointID=781 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-tkplk subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=ccd9d0c7-e874-4be2-ab24-42cf6cc0331e k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=ccd9d0c7-e874-4be2-ab24-42cf6cc0331e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=eaae85660b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=781 identity=26890 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tkplk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 208b04e3-7948-463b-9e09-2897c5648529 default }" containerID=1475f28f441bda721bac02614100d7bab48bce9b351501b537188c8c03895cc6 datapathConfiguration="&{false false false false false }" interface=lxcb05545570943 k8sPodName=local-path-storage/helper-pod-create-pvc-4234cc75-c60d-4d6c-bf06-c9e8769b2eb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1475f28f44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4234cc75-c60d-4d6c-bf06-c9e8769b2eb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1475f28f44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4234cc75-c60d-4d6c-bf06-c9e8769b2eb6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1475f28f44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identity=60226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4234cc75-c60d-4d6c-bf06-c9e8769b2eb6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1475f28f44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identity=60226 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4234cc75-c60d-4d6c-bf06-c9e8769b2eb6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1475f28f44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=262 identity=60226 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4234cc75-c60d-4d6c-bf06-c9e8769b2eb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1475f28f44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=262 identity=60226 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4234cc75-c60d-4d6c-bf06-c9e8769b2eb6 subsys=daemon level=info msg="Delete endpoint request" containerID=1475f28f44 endpointID=262 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4234cc75-c60d-4d6c-bf06-c9e8769b2eb6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1475f28f44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=262 identity=60226 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4234cc75-c60d-4d6c-bf06-c9e8769b2eb6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 c4df588f-8397-4ca4-972c-0d8f18178b95 default }" containerID=3e775892d1260abc13f2ba8c5ee9e77d7e1c26baf0ee6acebb3d04c812e0cec3 datapathConfiguration="&{false false false false false }" interface=lxcd4f1515a1d24 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e775892d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e775892d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3e775892d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e775892d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identity=59362 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e775892d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identity=59362 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e775892d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1361 identity=59362 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e775892d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1361 identity=59362 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.231 3d5f1cc6-3a36-45ef-a04f-e41e9131147d default }" containerID=c2d551b20d538a053d2e61ae4252f081884bbf30c4c591b8ae8cf7762e94d60e datapathConfiguration="&{false false false false false }" interface=lxc6640a8b71ffb k8sPodName=openstack/glance-db-init-rc4mk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2d551b20d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-db-init-rc4mk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2d551b20d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4a6e917d-8e4a-4dae-9d7c-d3544785a426,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=4a6e917d-8e4a-4dae-9d7c-d3544785a426,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-db-init-rc4mk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c2d551b20d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-db-init-rc4mk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4a6e917d-8e4a-4dae-9d7c-d3544785a426;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=4a6e917d-8e4a-4dae-9d7c-d3544785a426;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2d551b20d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identity=9415 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4a6e917d-8e4a-4dae-9d7c-d3544785a426,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=4a6e917d-8e4a-4dae-9d7c-d3544785a426,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-db-init-rc4mk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2d551b20d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identity=9415 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-db-init-rc4mk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c2d551b20d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1706 identity=9415 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-db-init-rc4mk subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2d551b20d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1706 identity=9415 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-db-init-rc4mk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2d551b20d endpointID=1706 k8sNamespace=openstack k8sPodName=glance-db-init-rc4mk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4a6e917d-8e4a-4dae-9d7c-d3544785a426 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=4a6e917d-8e4a-4dae-9d7c-d3544785a426 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c2d551b20d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1706 identity=9415 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-db-init-rc4mk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 92487186-c79f-406f-b307-6d7562630390 default }" containerID=01cee5d20427a11416c5d04e603b8957baf182a3eac4720fb2aaf4c8563a2bf4 datapathConfiguration="&{false false false false false }" interface=lxcc4f4903aa5fc k8sPodName=openstack/glance-db-sync-lbcbk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01cee5d204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-db-sync-lbcbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01cee5d204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aec72c81-d1f7-4afe-b5a8-12db9302d76b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=aec72c81-d1f7-4afe-b5a8-12db9302d76b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-db-sync-lbcbk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=aec72c81-d1f7-4afe-b5a8-12db9302d76b;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=aec72c81-d1f7-4afe-b5a8-12db9302d76b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=01cee5d204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identity=1050 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aec72c81-d1f7-4afe-b5a8-12db9302d76b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=aec72c81-d1f7-4afe-b5a8-12db9302d76b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-db-sync-lbcbk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01cee5d204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identity=1050 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-db-sync-lbcbk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01cee5d204 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=878 identity=1050 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-db-sync-lbcbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=01cee5d204 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=878 identity=1050 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-db-sync-lbcbk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=01cee5d204 endpointID=878 k8sNamespace=openstack k8sPodName=glance-db-sync-lbcbk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=aec72c81-d1f7-4afe-b5a8-12db9302d76b k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=aec72c81-d1f7-4afe-b5a8-12db9302d76b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=01cee5d204 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=878 identity=1050 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-db-sync-lbcbk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 63cf138d-5687-4c99-a37c-769db55c78b1 default }" containerID=2929b76d464f36f91f39ddb509a40921b4f2916e571a051cf65092fb1db9bfa1 datapathConfiguration="&{false false false false false }" interface=lxc27744d47cb83 k8sPodName=openstack/glance-rabbit-init-qm8cb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2929b76d46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2334 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-rabbit-init-qm8cb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2929b76d46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2334 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a5d1e1c6-4456-4355-b48a-b8ce4dc75b81,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a5d1e1c6-4456-4355-b48a-b8ce4dc75b81,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-rabbit-init-qm8cb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a5d1e1c6-4456-4355-b48a-b8ce4dc75b81;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a5d1e1c6-4456-4355-b48a-b8ce4dc75b81;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2929b76d46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2334 identity=14017 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a5d1e1c6-4456-4355-b48a-b8ce4dc75b81,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a5d1e1c6-4456-4355-b48a-b8ce4dc75b81,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-rabbit-init-qm8cb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2929b76d46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2334 identity=14017 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-rabbit-init-qm8cb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2929b76d46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2334 identity=14017 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-rabbit-init-qm8cb subsys=endpoint level=info msg="Successful endpoint creation" containerID=2929b76d46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2334 identity=14017 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-rabbit-init-qm8cb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2929b76d46 endpointID=2334 k8sNamespace=openstack k8sPodName=glance-rabbit-init-qm8cb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a5d1e1c6-4456-4355-b48a-b8ce4dc75b81 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a5d1e1c6-4456-4355-b48a-b8ce4dc75b81 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2929b76d46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2334 identity=14017 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-rabbit-init-qm8cb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 3cd3ff2e-5140-4397-82e1-0ff3cfd3b1f1 default }" containerID=e53097cdb36cc700bc64c1c58a66ab74e6ea643bc9db21f7ee78a905a6563bc7 datapathConfiguration="&{false false false false false }" interface=lxc92c6fe3c206c k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lfsrg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e53097cdb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lfsrg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e53097cdb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lfsrg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e53097cdb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identity=22087 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lfsrg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e53097cdb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identity=22087 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lfsrg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 f14e063b-2391-4f71-bdc6-a041930c73e0 default }" containerID=52f5826bc4229267c470f413e1c722344c2e0e8649b4eafa841ced27ec8986aa datapathConfiguration="&{false false false false false }" interface=lxcb4214563f319 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-t5qx7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52f5826bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-t5qx7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52f5826bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-t5qx7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52f5826bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identity=9899 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-t5qx7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52f5826bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identity=9899 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-t5qx7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e53097cdb3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=385 identity=22087 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lfsrg subsys=endpoint level=info msg="Successful endpoint creation" containerID=e53097cdb3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=385 identity=22087 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lfsrg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=52f5826bc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1008 identity=9899 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-t5qx7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=52f5826bc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1008 identity=9899 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-t5qx7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.244 eb5cbab6-745a-42dd-9c01-011992a3a3ef default }" containerID=6536ddbbb07b230be3b62a2a447f2e2f4bc0b05ffb911a96da6c0de911beb647 datapathConfiguration="&{false false false false false }" interface=lxc280a06ba725d k8sPodName=openstack/glance-ks-service-ss6lv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6536ddbbb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-service-ss6lv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6536ddbbb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4bcc3e5a-42a9-443f-bdde-c110672432de,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=4bcc3e5a-42a9-443f-bdde-c110672432de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-service-ss6lv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4bcc3e5a-42a9-443f-bdde-c110672432de;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=4bcc3e5a-42a9-443f-bdde-c110672432de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6536ddbbb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=32087 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4bcc3e5a-42a9-443f-bdde-c110672432de,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=4bcc3e5a-42a9-443f-bdde-c110672432de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-service-ss6lv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6536ddbbb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=32087 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-service-ss6lv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6536ddbbb0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1623 identity=32087 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-service-ss6lv subsys=endpoint level=info msg="Successful endpoint creation" containerID=6536ddbbb0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1623 identity=32087 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-service-ss6lv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6536ddbbb0 endpointID=1623 k8sNamespace=openstack k8sPodName=glance-ks-service-ss6lv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4bcc3e5a-42a9-443f-bdde-c110672432de k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=4bcc3e5a-42a9-443f-bdde-c110672432de k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6536ddbbb0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1623 identity=32087 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-service-ss6lv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 0b55c85d-6c4d-45e5-a357-920ac77ca87f default }" containerID=084a05578e6a9942347a7ebf4d50288381d650c0e9076f85287d03774db37260 datapathConfiguration="&{false false false false false }" interface=lxcac5ab2a78500 k8sPodName=openstack/glance-ks-endpoints-m8gz2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=084a05578e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-ks-endpoints-m8gz2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=084a05578e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f6ecf21b-1b55-4dd7-8472-663a07258d29,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f6ecf21b-1b55-4dd7-8472-663a07258d29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-ks-endpoints-m8gz2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f6ecf21b-1b55-4dd7-8472-663a07258d29;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f6ecf21b-1b55-4dd7-8472-663a07258d29;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=084a05578e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identity=471 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f6ecf21b-1b55-4dd7-8472-663a07258d29,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f6ecf21b-1b55-4dd7-8472-663a07258d29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-ks-endpoints-m8gz2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=084a05578e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identity=471 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-ks-endpoints-m8gz2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=084a05578e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=195 identity=471 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-ks-endpoints-m8gz2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=084a05578e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=195 identity=471 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-ks-endpoints-m8gz2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.79 a05cb45b-29e3-4a89-b3e6-272ee181448d default }" containerID=c38b781f0cea8a009710dcf8bec45d2092a093d289daf11a736a29765c058aaa datapathConfiguration="&{false false false false false }" interface=lxcf7abbf36c34b k8sPodName=openstack/ceph-object-controller-detect-version-f6d26 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c38b781f0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f6d26 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c38b781f0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=9fbe3661-9284-4ae5-afab-15ae4d488254,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=9fbe3661-9284-4ae5-afab-15ae4d488254,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f6d26 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=9fbe3661-9284-4ae5-afab-15ae4d488254;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=9fbe3661-9284-4ae5-afab-15ae4d488254;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c38b781f0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 identity=23493 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=9fbe3661-9284-4ae5-afab-15ae4d488254,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=9fbe3661-9284-4ae5-afab-15ae4d488254,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f6d26 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c38b781f0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 identity=23493 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f6d26 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c38b781f0c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2714 identity=23493 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f6d26 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c38b781f0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2714 identity=23493 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f6d26 subsys=daemon level=info msg="Delete endpoint request" containerID=084a05578e endpointID=195 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-m8gz2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f6ecf21b-1b55-4dd7-8472-663a07258d29 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f6ecf21b-1b55-4dd7-8472-663a07258d29 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=084a05578e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=195 identity=471 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-ks-endpoints-m8gz2 subsys=endpoint level=info msg="Delete endpoint request" containerID=c38b781f0c endpointID=2714 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-f6d26 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=9fbe3661-9284-4ae5-afab-15ae4d488254 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=9fbe3661-9284-4ae5-afab-15ae4d488254 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=c38b781f0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2714 identity=23493 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f6d26 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 ac4d5e79-05c8-4725-9310-819adf4d7704 default }" containerID=12e7d90f9c6d98d908f76b9bfe883e46439147970801dff68449a8f8a34640b0 datapathConfiguration="&{false false false false false }" interface=lxc30af04210c48 k8sPodName=openstack/glance-ks-user-27zvc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12e7d90f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-ks-user-27zvc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12e7d90f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0fbd109f-17a4-414e-9327-7bd9e5bb5f6f,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=0fbd109f-17a4-414e-9327-7bd9e5bb5f6f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-ks-user-27zvc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0fbd109f-17a4-414e-9327-7bd9e5bb5f6f;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=0fbd109f-17a4-414e-9327-7bd9e5bb5f6f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=12e7d90f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=31226 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0fbd109f-17a4-414e-9327-7bd9e5bb5f6f,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=0fbd109f-17a4-414e-9327-7bd9e5bb5f6f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-ks-user-27zvc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12e7d90f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=31226 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-ks-user-27zvc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12e7d90f9c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=295 identity=31226 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-ks-user-27zvc subsys=endpoint level=info msg="Successful endpoint creation" containerID=12e7d90f9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=295 identity=31226 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-ks-user-27zvc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=12e7d90f9c endpointID=295 k8sNamespace=openstack k8sPodName=glance-ks-user-27zvc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0fbd109f-17a4-414e-9327-7bd9e5bb5f6f k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=0fbd109f-17a4-414e-9327-7bd9e5bb5f6f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=12e7d90f9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=295 identity=31226 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-ks-user-27zvc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 6f128226-6f2f-49a9-9b3b-ed12199c6049 default }" containerID=1d1a2e9637f6e5117c93635f6a54f9077996ccd74d6a2d8c6758df9aebf098c6 datapathConfiguration="&{false false false false false }" interface=lxcdb40a6b41c58 k8sPodName=openstack/glance-metadefs-load-4gclx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d1a2e9637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1194 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-metadefs-load-4gclx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d1a2e9637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1194 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0dd683a5-9e31-47e1-b74d-b74445c53568,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=0dd683a5-9e31-47e1-b74d-b74445c53568,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-metadefs-load-4gclx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0dd683a5-9e31-47e1-b74d-b74445c53568;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=0dd683a5-9e31-47e1-b74d-b74445c53568;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1d1a2e9637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1194 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-metadefs-load-4gclx line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1d1a2e9637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1194 identity=13668 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0dd683a5-9e31-47e1-b74d-b74445c53568,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=0dd683a5-9e31-47e1-b74d-b74445c53568,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-metadefs-load-4gclx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d1a2e9637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1194 identity=13668 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-metadefs-load-4gclx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d1a2e9637 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1194 identity=13668 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-metadefs-load-4gclx subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d1a2e9637 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1194 identity=13668 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-metadefs-load-4gclx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1d1a2e9637 endpointID=1194 k8sNamespace=openstack k8sPodName=glance-metadefs-load-4gclx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0dd683a5-9e31-47e1-b74d-b74445c53568 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=0dd683a5-9e31-47e1-b74d-b74445c53568 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1d1a2e9637 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1194 identity=13668 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-metadefs-load-4gclx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 296170ce-bffd-4ec4-bb27-3a79228b647c default }" containerID=6380901b0ed3976045b78f1c5061e0356d6e2a3bc33c5a6db3ccc300768bb2d0 datapathConfiguration="&{false false false false false }" interface=lxc4b63634aacc6 k8sPodName=openstack/glance-storage-init-lnz5j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6380901b0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-lnz5j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6380901b0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=689d8c0a-3adb-4a73-adcd-5a93550d5aaf,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=689d8c0a-3adb-4a73-adcd-5a93550d5aaf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-lnz5j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=689d8c0a-3adb-4a73-adcd-5a93550d5aaf;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=689d8c0a-3adb-4a73-adcd-5a93550d5aaf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6380901b0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 identity=18834 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=689d8c0a-3adb-4a73-adcd-5a93550d5aaf,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=689d8c0a-3adb-4a73-adcd-5a93550d5aaf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-lnz5j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6380901b0e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2850 identity=18834 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-lnz5j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6380901b0e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2850 identity=18834 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-lnz5j subsys=endpoint level=info msg="Successful endpoint creation" containerID=6380901b0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2850 identity=18834 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-lnz5j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6380901b0e endpointID=2850 k8sNamespace=openstack k8sPodName=glance-storage-init-lnz5j subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=689d8c0a-3adb-4a73-adcd-5a93550d5aaf k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=689d8c0a-3adb-4a73-adcd-5a93550d5aaf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6380901b0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2850 identity=18834 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-lnz5j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 33dc66df-9c04-4c54-ad26-2cec757661c3 default }" containerID=0696156278fd1603b9d5ef7913d7b6950ef01e69c12395f73421d80e2292dabc datapathConfiguration="&{false false false false false }" interface=lxc08591520eb0a k8sPodName=openstack/glance-api-675cf5d6d9-vvgf6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0696156278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-api-675cf5d6d9-vvgf6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0696156278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-api-675cf5d6d9-vvgf6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0696156278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=3187 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-api-675cf5d6d9-vvgf6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0696156278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=3187 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-api-675cf5d6d9-vvgf6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0696156278 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=108 identity=3187 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-api-675cf5d6d9-vvgf6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0696156278 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=108 identity=3187 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-api-675cf5d6d9-vvgf6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.243 78687af7-a59b-47c3-a041-a94f5931cb72 default }" containerID=d1cb95c390fa2a1a9ffbd17348d75c455a110390bfe5dddcd6de10861a5fcd74 datapathConfiguration="&{false false false false false }" interface=lxc6c8c4738c64d k8sPodName=openstack/staffeln-api-7b967f45d8-2q42v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1cb95c390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-api-7b967f45d8-2q42v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1cb95c390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-api-7b967f45d8-2q42v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d1cb95c390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-api-7b967f45d8-2q42v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1cb95c390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=50904 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-api-7b967f45d8-2q42v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1cb95c390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=50904 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-api-7b967f45d8-2q42v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 fc4114ba-9865-4f20-8332-0cabdafc442b default }" containerID=c5b06a674343397e834a4eda18bd15a6db8d9f965b00aa1852ed76b8a73678d9 datapathConfiguration="&{false false false false false }" interface=lxceb40821ddb3f k8sPodName=openstack/staffeln-conductor-6946b7b58c-vnszv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5b06a6743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/staffeln-conductor-6946b7b58c-vnszv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5b06a6743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/staffeln-conductor-6946b7b58c-vnszv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5b06a6743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 identity=24005 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/staffeln-conductor-6946b7b58c-vnszv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5b06a6743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 identity=24005 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/staffeln-conductor-6946b7b58c-vnszv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1cb95c390 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=841 identity=50904 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-api-7b967f45d8-2q42v subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1cb95c390 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=841 identity=50904 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-api-7b967f45d8-2q42v subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.2 46a24a58-203e-4223-8cb9-6ebb408ad929 default }" containerID=fd76b4de2884243c16b2f960a0df21c8006c46c0bfde7dc01827bab47ee312c0 datapathConfiguration="&{false false false false false }" interface=lxc9ddd08bf368b k8sPodName=openstack/staffeln-db-init-6lh2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd76b4de28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/staffeln-db-init-6lh2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd76b4de28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0fc7d795-1043-4c8a-8c02-b8e881db813e,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=0fc7d795-1043-4c8a-8c02-b8e881db813e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/staffeln-db-init-6lh2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=0fc7d795-1043-4c8a-8c02-b8e881db813e;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=0fc7d795-1043-4c8a-8c02-b8e881db813e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd76b4de28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 identity=18649 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0fc7d795-1043-4c8a-8c02-b8e881db813e,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=0fc7d795-1043-4c8a-8c02-b8e881db813e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/staffeln-db-init-6lh2k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd76b4de28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 identity=18649 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/staffeln-db-init-6lh2k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5b06a6743 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=730 identity=24005 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/staffeln-conductor-6946b7b58c-vnszv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5b06a6743 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=730 identity=24005 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/staffeln-conductor-6946b7b58c-vnszv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fd76b4de28 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2804 identity=18649 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/staffeln-db-init-6lh2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd76b4de28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2804 identity=18649 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/staffeln-db-init-6lh2k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fd76b4de28 endpointID=2804 k8sNamespace=openstack k8sPodName=staffeln-db-init-6lh2k subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=0fc7d795-1043-4c8a-8c02-b8e881db813e k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=0fc7d795-1043-4c8a-8c02-b8e881db813e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=fd76b4de28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2804 identity=18649 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/staffeln-db-init-6lh2k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 e1628e9d-5b31-4de9-b2de-71bbf3f35ff8 default }" containerID=396ee1256c643d92fb8b57b23e352a66504be8be0c0eae0b037c5b497755b0e7 datapathConfiguration="&{false false false false false }" interface=lxcd659227fa6c0 k8sPodName=openstack/staffeln-db-sync-fszh9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=396ee1256c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-fszh9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=396ee1256c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1866a9c4-7c1d-4b62-862f-9f049ed6360a,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=1866a9c4-7c1d-4b62-862f-9f049ed6360a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-fszh9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=1866a9c4-7c1d-4b62-862f-9f049ed6360a;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=1866a9c4-7c1d-4b62-862f-9f049ed6360a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=396ee1256c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 identity=49957 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1866a9c4-7c1d-4b62-862f-9f049ed6360a,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=1866a9c4-7c1d-4b62-862f-9f049ed6360a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-fszh9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=396ee1256c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 identity=49957 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-fszh9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=396ee1256c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1837 identity=49957 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-fszh9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=396ee1256c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1837 identity=49957 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/staffeln-db-sync-fszh9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager