level=info msg="Memory available for map entries (0.003% of 67421630464B): 168554076B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="919.473µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="49.661µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="989.084µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.25µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=90.757334ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.69µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="20.63µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="54.502µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="64.042µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="76.372µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="418.18µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.33µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=29.974851ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.188828ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="37.131µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="33.98µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="343.118µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="111.603µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="85.922µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=75.345973ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="147.493µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="51.521µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.129.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.223297ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="9.831µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.782703ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.400873ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="12.45µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.791µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="154.774µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.55µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="24.93µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="17.561µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="36.901µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="393.82µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="12.3µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="231.345µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="960.114µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.492898ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="6.03µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="20.871µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.129 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.129 ipAddr.ipv6="" k8sNodeIP=199.204.45.129 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.129" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.47" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.129" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.129} {CiliumInternalIP 10.0.0.47}] 10.0.0.0/24 [] [] 10.0.0.76 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:44249" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.617349591s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="46.991µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="12.47µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="57.651µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="18.461µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3665 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3665 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3665 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.637629959s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=300.708809ms file-path=/var/run/cilium/state/templates/7bc073c2b687d41c8a27e89709168fe8bbd238467149ccc775778e8ed4169930/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3665 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 ipv4=10.0.0.76 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identityLabels="reserved:health" ipv4=10.0.0.76 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identity=4 identityLabels="reserved:health" ipv4=10.0.0.76 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 43325aff-b3e1-4050-b0a1-6388607033a9 default }" containerID=3917bddeaf540bc62baf888043d74714fd7975473c8030c3d096bd956c4c4d70 datapathConfiguration="&{false false false false false }" interface=lxc9b0471065596 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8qxjh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3917bddeaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2840 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8qxjh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3917bddeaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2840 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8qxjh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3917bddeaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2840 identity=11054 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8qxjh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3917bddeaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2840 identity=11054 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8qxjh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 f29c0d2a-f2c7-4d46-b5a0-4f4b06f82204 default }" containerID=85c93bf62f12e0eb4a2530760409e8400b8e1abd2bfe3e7d8b646df1ec1d62c9 datapathConfiguration="&{false false false false false }" interface=lxc063fc6d5ed60 k8sPodName=cert-manager/cert-manager-startupapicheck-fbgmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85c93bf62f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fbgmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85c93bf62f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=4c2ec5b6-467c-4a77-829b-30b0a3fd90a2,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=4c2ec5b6-467c-4a77-829b-30b0a3fd90a2,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fbgmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=4c2ec5b6-467c-4a77-829b-30b0a3fd90a2;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=4c2ec5b6-467c-4a77-829b-30b0a3fd90a2;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85c93bf62f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identity=981 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=4c2ec5b6-467c-4a77-829b-30b0a3fd90a2,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=4c2ec5b6-467c-4a77-829b-30b0a3fd90a2,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fbgmx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85c93bf62f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identity=981 ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fbgmx subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Create endpoint request" addressing="&{10.0.0.125 e5209b4f-ef39-426e-8397-001baa1149d9 default }" containerID=2f11ecacab198c56040c5feca7af123cc148dc41ac63efc888ade33ab30153e7 datapathConfiguration="&{false false false false false }" interface=lxcf6bc16d4d55e k8sPodName=kube-system/coredns-67659f764b-76shm labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.176 61faae39-de36-4dba-8790-9a6433195af9 default }" containerID=3de1cbb7604a10cf820997ad7ba35631879f99e24ab60bfd4cfabf5814fa4b84 datapathConfiguration="&{false false false false false }" interface=lxcc13fcbcd7272 k8sPodName=kube-system/coredns-67659f764b-f9dgq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f11ecacab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2426 ipv4=10.0.0.125 ipv6= k8sPodName=kube-system/coredns-67659f764b-76shm subsys=endpoint level=info msg="New endpoint" containerID=3de1cbb760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9dgq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f11ecacab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2426 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.125 ipv6= k8sPodName=kube-system/coredns-67659f764b-76shm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3de1cbb760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9dgq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f11ecacab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2426 identity=27176 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.125 ipv6= k8sPodName=kube-system/coredns-67659f764b-76shm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f11ecacab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2426 identity=27176 ipv4=10.0.0.125 ipv6= k8sPodName=kube-system/coredns-67659f764b-76shm subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3de1cbb760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 identity=27176 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9dgq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3de1cbb760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 identity=27176 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9dgq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 48525352-9c50-459b-bc5d-bc0b6f3286cc default }" containerID=cd43e6265daa283c512d0a29a6dab222127c9545d998f353c7c6efd1df3ac552 datapathConfiguration="&{false false false false false }" interface=lxca110f54041a4 k8sPodName=cert-manager/cert-manager-75c4c745bc-c4dbc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd43e6265d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-c4dbc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd43e6265d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-c4dbc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Compiled new BPF template" BPFCompilationTime=1.122787752s file-path=/var/run/cilium/state/templates/f9f71d8ce831e31b9e93232708c71edb02583cc4da510e39b8f382bdf5d066f9/bpf_lxc.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.159 adf1b781-c411-46e4-b760-e016ac15d493 default }" containerID=95159075fb7a284f72236f8f5b2098d25218abae57067421e7135b4d59caebcb datapathConfiguration="&{false false false false false }" interface=lxc07fabf34063b k8sPodName=kube-system/coredns-7c96b6546b-m59qj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95159075fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m59qj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95159075fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m59qj subsys=endpoint level=info msg="Identity of endpoint changed" containerID=95159075fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 identity=27176 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m59qj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95159075fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 identity=27176 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m59qj subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd43e6265d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 identity=3693 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-c4dbc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd43e6265d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 identity=3693 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-c4dbc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=523 identity=4 ipv4=10.0.0.76 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85c93bf62f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=252 identity=981 ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fbgmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=85c93bf62f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=252 identity=981 ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fbgmx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2f11ecacab datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2426 identity=27176 ipv4=10.0.0.125 ipv6= k8sPodName=kube-system/coredns-67659f764b-76shm subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f11ecacab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2426 identity=27176 ipv4=10.0.0.125 ipv6= k8sPodName=kube-system/coredns-67659f764b-76shm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3de1cbb760 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=888 identity=27176 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9dgq subsys=endpoint level=info msg="Successful endpoint creation" containerID=3de1cbb760 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=888 identity=27176 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9dgq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3917bddeaf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2840 identity=11054 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8qxjh subsys=endpoint level=info msg="Successful endpoint creation" containerID=3917bddeaf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2840 identity=11054 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8qxjh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=95159075fb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3787 identity=27176 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m59qj subsys=endpoint level=info msg="Successful endpoint creation" containerID=95159075fb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3787 identity=27176 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m59qj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.6 25dbc8a1-faf1-4f32-9657-efd612bd6166 default }" containerID=5b30f9bba84e462d6f8f0ccbadbf18fdae1d58a62df764f0d22f6fef85df106e datapathConfiguration="&{false false false false false }" interface=lxc62627e06487a k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hnxf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b30f9bba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hnxf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b30f9bba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hnxf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=cd43e6265d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2935 identity=3693 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-c4dbc subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd43e6265d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2935 identity=3693 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-c4dbc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.148 fbcd2a46-cb82-472c-90cb-ade81171951c default }" containerID=e2047ec0f7b594b0417ef1c2cfadd3fe141f620eb88e4e81b2aaae7d72f8b28b datapathConfiguration="&{false false false false false }" interface=lxc5585f546b162 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-mw6wh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2047ec0f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2163 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-mw6wh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2047ec0f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2163 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-mw6wh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5b30f9bba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hnxf7 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=e2047ec0f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2163 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-mw6wh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b30f9bba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 identity=64756 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hnxf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b30f9bba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 identity=64756 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hnxf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=5b30f9bba8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1224 identity=64756 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hnxf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b30f9bba8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1224 identity=64756 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hnxf7 subsys=daemon level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2047ec0f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2163 identity=5398 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-mw6wh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2047ec0f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2163 identity=5398 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-mw6wh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2047ec0f7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2163 identity=5398 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-mw6wh subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2047ec0f7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2163 identity=5398 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-mw6wh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=95159075fb endpointID=3787 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-m59qj subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=95159075fb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3787 identity=27176 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m59qj subsys=endpoint level=info msg="Delete endpoint request" containerID=85c93bf62f endpointID=252 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-fbgmx subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=4c2ec5b6-467c-4a77-829b-30b0a3fd90a2 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=4c2ec5b6-467c-4a77-829b-30b0a3fd90a2 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=85c93bf62f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=252 identity=981 ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fbgmx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 0825a87e-3ae5-45c3-a5b4-beb2386a6ce5 default }" containerID=5baf58b974d01f2ccf683e6427d40ebe5147d14010c3aac1de5038e3c08e2293 datapathConfiguration="&{false false false false false }" interface=lxc0b22ce4dcf6b k8sPodName=ingress-nginx/ingress-nginx-admission-create-vp968 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5baf58b974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vp968 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5baf58b974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5efa70f6-abee-404e-9eca-1dcf22193af4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=5efa70f6-abee-404e-9eca-1dcf22193af4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vp968 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=5efa70f6-abee-404e-9eca-1dcf22193af4;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=5efa70f6-abee-404e-9eca-1dcf22193af4;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5baf58b974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 identity=17287 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5efa70f6-abee-404e-9eca-1dcf22193af4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=5efa70f6-abee-404e-9eca-1dcf22193af4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vp968 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5baf58b974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 identity=17287 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vp968 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5baf58b974 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=493 identity=17287 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vp968 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5baf58b974 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=493 identity=17287 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vp968 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5baf58b974 endpointID=493 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-vp968 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=5efa70f6-abee-404e-9eca-1dcf22193af4 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=5efa70f6-abee-404e-9eca-1dcf22193af4 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=5baf58b974 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=493 identity=17287 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vp968 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 655c913d-7241-45be-8f8e-8fc1120b5137 default }" containerID=b4b1e64f21af4843853fd05137d94f2691fcce6475478332599bed67e5448c5f datapathConfiguration="&{false false false false false }" interface=lxc577349919f96 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ps7wm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4b1e64f21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3569 ipv4=10.0.0.186 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ps7wm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4b1e64f21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3569 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.186 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ps7wm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4b1e64f21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3569 identity=7723 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.186 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ps7wm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4b1e64f21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3569 identity=7723 ipv4=10.0.0.186 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ps7wm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4b1e64f21 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3569 identity=7723 ipv4=10.0.0.186 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ps7wm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4b1e64f21 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3569 identity=7723 ipv4=10.0.0.186 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ps7wm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.231 d495edfb-4cbf-4b19-aea6-40fa09706157 default }" containerID=8d9523b96a1d16804893e2f85b234b406d110ec57466b7256d1eeb9f2536805d datapathConfiguration="&{false false false false false }" interface=lxc7b5271c0f4fe k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wvwlk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d9523b96a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2261 ipv4=10.0.0.231 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wvwlk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d9523b96a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2261 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=16c7711a-ca11-4031-8306-c195880d3d7b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=16c7711a-ca11-4031-8306-c195880d3d7b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.231 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wvwlk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=16c7711a-ca11-4031-8306-c195880d3d7b;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=16c7711a-ca11-4031-8306-c195880d3d7b;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d9523b96a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2261 identity=24282 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=16c7711a-ca11-4031-8306-c195880d3d7b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=16c7711a-ca11-4031-8306-c195880d3d7b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.231 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wvwlk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d9523b96a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2261 identity=24282 ipv4=10.0.0.231 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wvwlk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d9523b96a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2261 identity=24282 ipv4=10.0.0.231 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wvwlk subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d9523b96a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2261 identity=24282 ipv4=10.0.0.231 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wvwlk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d9523b96a endpointID=2261 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-wvwlk subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=16c7711a-ca11-4031-8306-c195880d3d7b k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=16c7711a-ca11-4031-8306-c195880d3d7b k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=8d9523b96a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2261 identity=24282 ipv4=10.0.0.231 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wvwlk subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=4c3e0e53-5429-4602-990f-e07b04ea418d] Description:}]" policyAddRequest=5ed32e80-5947-498a-b764-8c0b29035643 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5ed32e80-5947-498a-b764-8c0b29035643 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=2e6175d2-bef3-48a7-ae34-df91d54a7381] Description:}]" policyAddRequest=0d667764-ec37-47a9-95be-bccc4ba4336e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0d667764-ec37-47a9-95be-bccc4ba4336e policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.126 8728c7f9-cb9e-4ca8-ac75-c8955fb90c61 default }" containerID=c505247614a7bd326926493430d5f891039bd2b6afb1f115c80daa1841ea4db8 datapathConfiguration="&{false false false false false }" interface=lxc85577b7aaefa k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lj62w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c505247614 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lj62w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c505247614 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lj62w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c505247614 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=14653 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lj62w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c505247614 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=14653 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lj62w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c505247614 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=483 identity=14653 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lj62w subsys=endpoint level=info msg="Successful endpoint creation" containerID=c505247614 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=483 identity=14653 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lj62w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.221 bbe701c7-042c-42c9-8d9a-d102c61aed95 default }" containerID=0b47017d521c9c289509f12fa966284a9dd3f08ffd2415bf2c11248f079843f3 datapathConfiguration="&{false false false false false }" interface=lxc9adc7ddd783e k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vxsss labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b47017d52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1424 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vxsss subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b47017d52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1424 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vxsss subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b47017d52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1424 identity=3903 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vxsss oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b47017d52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1424 identity=3903 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vxsss subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b47017d52 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1424 identity=3903 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vxsss subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b47017d52 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1424 identity=3903 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vxsss subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.74 2173e0d8-5ce1-44b4-a743-f6dca6990aa0 default }" containerID=5f116d676ff8da4388ee4e3f19f7900cd0971fb408b13991ea54490fdad3d2b1 datapathConfiguration="&{false false false false false }" interface=lxc2fc5834ba308 k8sPodName=openstack/pxc-operator-69cb5bbdb9-hxd78 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f116d676f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hxd78 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f116d676f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hxd78 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5f116d676f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hxd78 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f116d676f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identity=25308 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hxd78 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f116d676f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identity=25308 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hxd78 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f116d676f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=682 identity=25308 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hxd78 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f116d676f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=682 identity=25308 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hxd78 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 051615f4-60f7-4c4f-a69a-13d11459a425 default }" containerID=691c32f86b82e3ef6096aff2fb7d1e391eaa1450fe9cea05476545bb72f0f4a0 datapathConfiguration="&{false false false false false }" interface=lxce7e70d82cf24 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=691c32f86b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=691c32f86b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=691c32f86b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 identity=40986 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=691c32f86b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 identity=40986 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=691c32f86b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1052 identity=40986 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=691c32f86b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1052 identity=40986 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.138 4ed24ea5-f26b-4d93-a6b8-cfe6f70b0fdd default }" containerID=95c1360b4a66f650a665ec9b32277b7902a8a08fa0fcdf9f217d707ccd69a068 datapathConfiguration="&{false false false false false }" interface=lxcaa67fc4f60c8 k8sPodName=local-path-storage/helper-pod-create-pvc-54287bae-c52b-46af-9621-2f0958be0b42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95c1360b4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1552 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54287bae-c52b-46af-9621-2f0958be0b42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95c1360b4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1552 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54287bae-c52b-46af-9621-2f0958be0b42 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95c1360b4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1552 identity=8389 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54287bae-c52b-46af-9621-2f0958be0b42 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95c1360b4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1552 identity=8389 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54287bae-c52b-46af-9621-2f0958be0b42 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=95c1360b4a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1552 identity=8389 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54287bae-c52b-46af-9621-2f0958be0b42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=95c1360b4a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1552 identity=8389 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54287bae-c52b-46af-9621-2f0958be0b42 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=95c1360b4a endpointID=1552 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-54287bae-c52b-46af-9621-2f0958be0b42 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=95c1360b4a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1552 identity=8389 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54287bae-c52b-46af-9621-2f0958be0b42 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 c4c089c9-5945-435a-a12a-a500ed583b10 default }" containerID=1c3763d8666eebc190f01dc5b0c998934961ac3c8cfbe26de28bfe5f82d8a741 datapathConfiguration="&{false false false false false }" interface=lxc1163eda2f9d7 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c3763d866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c3763d866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c3763d866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=64390 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1c3763d866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=64390 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c3763d866 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=576 identity=64390 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c3763d866 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=576 identity=64390 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6e1e7674-832f-435b-b97b-fa95620fd302] Description:}]" policyAddRequest=d725be9d-4ae7-44d0-91ee-b242e27d77c0 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d725be9d-4ae7-44d0-91ee-b242e27d77c0 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.219 6f0efbe6-e24d-4487-9932-f7d70688da7f default }" containerID=736635620d8ecbf4c7384ceaff5095563477c565899a04aa8220b5992a78b197 datapathConfiguration="&{false false false false false }" interface=lxcb9af4ae537a2 k8sPodName=local-path-storage/helper-pod-create-pvc-e3e52bf2-30b6-433a-b090-a64f9de16580 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=736635620d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3e52bf2-30b6-433a-b090-a64f9de16580 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=736635620d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3e52bf2-30b6-433a-b090-a64f9de16580 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=736635620d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=8389 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3e52bf2-30b6-433a-b090-a64f9de16580 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=736635620d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=8389 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3e52bf2-30b6-433a-b090-a64f9de16580 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=736635620d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=46 identity=8389 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3e52bf2-30b6-433a-b090-a64f9de16580 subsys=endpoint level=info msg="Successful endpoint creation" containerID=736635620d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=46 identity=8389 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3e52bf2-30b6-433a-b090-a64f9de16580 subsys=daemon level=info msg="Delete endpoint request" containerID=736635620d endpointID=46 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e3e52bf2-30b6-433a-b090-a64f9de16580 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=736635620d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=46 identity=8389 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3e52bf2-30b6-433a-b090-a64f9de16580 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 1b8c2f8f-68ba-4775-8259-22aeeb1821f1 default }" containerID=095c2dbdb8ae7769ac510fa3578945ea1cd9f5cb8b1fdfde25c374a603a1aaa8 datapathConfiguration="&{false false false false false }" interface=lxc28ee5e35b5a9 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=095c2dbdb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3688 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=095c2dbdb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3688 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=095c2dbdb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3688 identity=7876 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=095c2dbdb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3688 identity=7876 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=095c2dbdb8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3688 identity=7876 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=095c2dbdb8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3688 identity=7876 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=d8243c7e-e04d-4e16-8aaf-5286320a0a92] Description:}]" policyAddRequest=839c9c9a-65e8-47f5-8782-cc85e036d358 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=839c9c9a-65e8-47f5-8782-cc85e036d358 policyRevision=5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.188 02b9d58d-bb48-49f0-9177-6fd6aa4b3a78 default }" containerID=7e3535646565cf6153ba074c6f5897ed648e21fa84e8d5f524a69d852c652ff4 datapathConfiguration="&{false false false false false }" interface=lxc7a4803ad19d4 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e35356465 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 ipv4=10.0.0.188 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e35356465 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.188 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e35356465 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identity=7611 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.188 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7e35356465 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identity=7611 ipv4=10.0.0.188 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e35356465 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=514 identity=7611 ipv4=10.0.0.188 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e35356465 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=514 identity=7611 ipv4=10.0.0.188 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00918811800830549 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.151 de5f7b6f-7760-44cf-bb36-a1409ee37a1b default }" containerID=b6837cc50e363ba9cf2116aff90534c8a7848a6bff4110834aa8d742a0d93434 datapathConfiguration="&{false false false false false }" interface=lxc13984b6966e6 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z54tc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6837cc50e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z54tc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6837cc50e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z54tc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6837cc50e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identity=24573 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z54tc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b6837cc50e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identity=24573 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z54tc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 961ccd55-6e8c-4f9b-a6fe-c14746d65470 default }" containerID=c785851e52529805eb5dd7aec8f0114a1f5824b5dbc96e9355df1e07bebbf0ba datapathConfiguration="&{false false false false false }" interface=lxcf140879fdfea k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5g5p4 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.152 3e5db605-bf56-4a5c-88a7-a4f3b9f0f219 default }" containerID=12b2ed42e1362289828326a24c7c7ffb8a4954b3781332bba5ba4bbbe805cc02 datapathConfiguration="&{false false false false false }" interface=lxca54a78b2b603 k8sPodName=monitoring/node-feature-discovery-worker-z482q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c785851e52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5g5p4 subsys=endpoint level=info msg="New endpoint" containerID=12b2ed42e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-z482q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12b2ed42e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-z482q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c785851e52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5g5p4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=12b2ed42e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=14045 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-z482q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12b2ed42e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=14045 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-z482q subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c785851e52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=17962 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5g5p4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c785851e52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=17962 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5g5p4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6837cc50e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=324 identity=24573 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z54tc subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6837cc50e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=324 identity=24573 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z54tc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c785851e52 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=297 identity=17962 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5g5p4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c785851e52 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=297 identity=17962 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5g5p4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=12b2ed42e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=587 identity=14045 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-z482q subsys=endpoint level=info msg="Successful endpoint creation" containerID=12b2ed42e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=587 identity=14045 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-z482q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.22 4ea0219f-ac66-4e97-accc-622b77895888 default }" containerID=6d686d831cf8882a8ca67017008b3fa71e7814e2ce2c0446e90ea7a67e017c6a datapathConfiguration="&{false false false false false }" interface=lxc244695bbd47c k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-447h2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d686d831c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 ipv4=10.0.0.22 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-447h2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d686d831c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.22 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-447h2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d686d831c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=49582 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.22 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-447h2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d686d831c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=49582 ipv4=10.0.0.22 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-447h2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6d686d831c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=15 identity=49582 ipv4=10.0.0.22 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-447h2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d686d831c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=15 identity=49582 ipv4=10.0.0.22 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-447h2 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3665 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03665 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03665 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03665 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03665:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3665 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 ac793998-5a08-473b-a54a-91b0b51b06fa default }" containerID=e56746150b1c70c7697d8a937551be6670f62db1734a1335eca3ba50921b4e35 datapathConfiguration="&{false false false false false }" interface=lxce0134df7f7f0 k8sPodName=monitoring/kube-prometheus-stack-admission-create-xfgsd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e56746150b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xfgsd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e56746150b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=726ea244-d1c5-49e7-8ecb-016394e4815e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=726ea244-d1c5-49e7-8ecb-016394e4815e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xfgsd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=726ea244-d1c5-49e7-8ecb-016394e4815e;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=726ea244-d1c5-49e7-8ecb-016394e4815e;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e56746150b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identity=6725 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=726ea244-d1c5-49e7-8ecb-016394e4815e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=726ea244-d1c5-49e7-8ecb-016394e4815e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xfgsd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e56746150b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identity=6725 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xfgsd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e56746150b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1147 identity=6725 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xfgsd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e56746150b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1147 identity=6725 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xfgsd subsys=daemon level=info msg="Delete endpoint request" containerID=e56746150b endpointID=1147 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-xfgsd subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=726ea244-d1c5-49e7-8ecb-016394e4815e k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=726ea244-d1c5-49e7-8ecb-016394e4815e k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e56746150b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1147 identity=6725 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xfgsd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 7d902830-c539-4a28-bc36-7a8ade7a8fc9 default }" containerID=22f2b2c0c1be9cb20bffe1195b802e2f8f9d0b0b294f9ae195caa9c1d751b193 datapathConfiguration="&{false false false false false }" interface=lxcb9bf220196b9 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xjqxv labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.75 8eee41ff-e847-4c2c-94aa-a18c764b89b0 default }" containerID=5f71110e98d36a8f2379f7da5ce7be88f7c5644f31757b7a4a97b086038ef0da datapathConfiguration="&{false false false false false }" interface=lxc2de32574415b k8sPodName=monitoring/kube-prometheus-stack-grafana-bbfb7496b-mlsgr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22f2b2c0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xjqxv subsys=endpoint level=info msg="New endpoint" containerID=5f71110e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bbfb7496b-mlsgr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22f2b2c0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xjqxv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f71110e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bbfb7496b-mlsgr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22f2b2c0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identity=19330 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xjqxv oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=22f2b2c0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identity=19330 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xjqxv subsys=endpoint level=info msg="Invalid state transition skipped" containerID=5f71110e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bbfb7496b-mlsgr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f71110e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identity=3749 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bbfb7496b-mlsgr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f71110e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identity=3749 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bbfb7496b-mlsgr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 39d7cefd-9af9-489a-91bf-2bb50247a502 default }" containerID=12d0008f423023078c14a0c6e378d4f0b4f31102af4948cc60f8a4a95728f260 datapathConfiguration="&{false false false false false }" interface=lxc4293a31a6c40 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bcrql labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12d0008f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bcrql subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12d0008f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bcrql subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12d0008f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 identity=8314 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bcrql oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12d0008f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 identity=8314 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bcrql subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22f2b2c0c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1397 identity=19330 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xjqxv subsys=endpoint level=info msg="Successful endpoint creation" containerID=22f2b2c0c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1397 identity=19330 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xjqxv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=12d0008f42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3098 identity=8314 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bcrql subsys=endpoint level=info msg="Successful endpoint creation" containerID=12d0008f42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3098 identity=8314 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bcrql subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5f71110e98 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=724 identity=3749 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bbfb7496b-mlsgr subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f71110e98 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=724 identity=3749 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bbfb7496b-mlsgr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.198 11a57685-0b3a-4c5e-bfe9-380a259bc3ce default }" containerID=c08b223107b3d1258008bb7dc9be20cbe5b5ed85566354741077c05d2c4080b7 datapathConfiguration="&{false false false false false }" interface=lxc6361a77d94d4 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-w4g2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c08b223107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-w4g2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c08b223107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=4878f2f1-f2cd-433e-8cd2-ddf3bffa14bd,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=4878f2f1-f2cd-433e-8cd2-ddf3bffa14bd,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-w4g2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=4878f2f1-f2cd-433e-8cd2-ddf3bffa14bd;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=4878f2f1-f2cd-433e-8cd2-ddf3bffa14bd;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c08b223107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=10202 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=4878f2f1-f2cd-433e-8cd2-ddf3bffa14bd,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=4878f2f1-f2cd-433e-8cd2-ddf3bffa14bd,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-w4g2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c08b223107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=10202 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-w4g2c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c08b223107 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1380 identity=10202 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-w4g2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=c08b223107 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1380 identity=10202 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-w4g2c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c08b223107 endpointID=1380 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-w4g2c subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=4878f2f1-f2cd-433e-8cd2-ddf3bffa14bd k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=4878f2f1-f2cd-433e-8cd2-ddf3bffa14bd k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=c08b223107 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1380 identity=10202 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-w4g2c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 0d4db361-246f-439c-8099-f91e3b618da1 default }" containerID=935efae58114163f211af87c2d82124bfa1b0c8f175ae3a2bdba04130c11bf84 datapathConfiguration="&{false false false false false }" interface=lxc3fe0d7cdbe7b k8sPodName=local-path-storage/helper-pod-create-pvc-310e9ebe-6bae-47b5-a2da-344fa5bd0d26 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=935efae581 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-310e9ebe-6bae-47b5-a2da-344fa5bd0d26 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=935efae581 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-310e9ebe-6bae-47b5-a2da-344fa5bd0d26 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=935efae581 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identity=8389 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-310e9ebe-6bae-47b5-a2da-344fa5bd0d26 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=935efae581 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identity=8389 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-310e9ebe-6bae-47b5-a2da-344fa5bd0d26 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=935efae581 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2373 identity=8389 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-310e9ebe-6bae-47b5-a2da-344fa5bd0d26 subsys=endpoint level=info msg="Successful endpoint creation" containerID=935efae581 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2373 identity=8389 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-310e9ebe-6bae-47b5-a2da-344fa5bd0d26 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.140 05445a3b-083e-4d1b-b132-d21f27cfc45e default }" containerID=cdc56e62fa524863f3324445b330f3e33080087b1f061b5965a04dcb91dd65f1 datapathConfiguration="&{false false false false false }" interface=lxcf466854ea659 k8sPodName=local-path-storage/helper-pod-create-pvc-b6e6add3-430c-429f-b04c-fe4ce4df5648 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdc56e62fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6e6add3-430c-429f-b04c-fe4ce4df5648 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdc56e62fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6e6add3-430c-429f-b04c-fe4ce4df5648 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cdc56e62fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 identity=8389 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6e6add3-430c-429f-b04c-fe4ce4df5648 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdc56e62fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 identity=8389 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6e6add3-430c-429f-b04c-fe4ce4df5648 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cdc56e62fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2741 identity=8389 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6e6add3-430c-429f-b04c-fe4ce4df5648 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdc56e62fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2741 identity=8389 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6e6add3-430c-429f-b04c-fe4ce4df5648 subsys=daemon level=info msg="Delete endpoint request" containerID=935efae581 endpointID=2373 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-310e9ebe-6bae-47b5-a2da-344fa5bd0d26 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=cdc56e62fa endpointID=2741 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b6e6add3-430c-429f-b04c-fe4ce4df5648 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=935efae581 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2373 identity=8389 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-310e9ebe-6bae-47b5-a2da-344fa5bd0d26 subsys=endpoint level=info msg="Removed endpoint" containerID=cdc56e62fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2741 identity=8389 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6e6add3-430c-429f-b04c-fe4ce4df5648 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 e6a01469-47a5-411f-a573-e190e26b5692 default }" containerID=d3a7bde42305bd333e25e7c32fecbd4dab99920c72dbf99a1ee3f0d2b1a1e732 datapathConfiguration="&{false false false false false }" interface=lxc307925313159 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3a7bde423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=713 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3a7bde423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=713 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d3a7bde423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=713 identity=15878 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3a7bde423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=713 identity=15878 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d3a7bde423 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=713 identity=15878 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3a7bde423 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=713 identity=15878 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.7 9ed3a254-d0c3-4e0c-9b47-c03ed53287ee default }" containerID=fcf393ba10eb2ff5f66a4d736b1ba44a443cd572dd64d9c17c68fec20339d4dc datapathConfiguration="&{false false false false false }" interface=lxc22a879fe7740 k8sPodName=monitoring/loki-gateway-cf54cb88c-74t8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcf393ba10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-74t8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcf393ba10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-74t8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fcf393ba10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=3080 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-74t8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fcf393ba10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=3080 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-74t8p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 b8264a5f-12ca-45d9-97ca-384c82f492e9 default }" containerID=f6b7fe8f05d5b9d136dcbeb9e75c54cca95c53ebbc9f8c920b327b4fbb0c77e0 datapathConfiguration="&{false false false false false }" interface=lxcca4754a7f976 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6b7fe8f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6b7fe8f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6b7fe8f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identity=17681 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6b7fe8f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identity=17681 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fcf393ba10 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=412 identity=3080 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-74t8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcf393ba10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=412 identity=3080 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-74t8p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.210 a6ba102c-65a3-4b29-8ae8-27191929906e default }" containerID=735f7a52dec383c54c221463d53b83d5e255d116e3d2a6be9b7e3d467bb1ba8e datapathConfiguration="&{false false false false false }" interface=lxced845a8e1ae6 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=735f7a52de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3996 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=735f7a52de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3996 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.200 63d6416d-147f-4df9-9098-42690c1a7e53 default }" containerID=2ec3f73ceb37e3854d5e7d60e2e77b138dd084dec1b203ea92708318c16a5727 datapathConfiguration="&{false false false false false }" interface=lxc53e4e8e4ee97 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ec3f73ceb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2394 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ec3f73ceb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2394 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=735f7a52de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3996 identity=8173 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=735f7a52de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3996 identity=8173 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ec3f73ceb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2394 identity=3552 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ec3f73ceb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2394 identity=3552 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6b7fe8f05 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2049 identity=17681 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6b7fe8f05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2049 identity=17681 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=735f7a52de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3996 identity=8173 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=735f7a52de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3996 identity=8173 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2ec3f73ceb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2394 identity=3552 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ec3f73ceb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2394 identity=3552 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.79 07ef58b4-7b0d-412c-956c-ce1660182128 default }" containerID=58fe7ed417f4fd8a3ed6caf82b9f1b38916ec2bbf30ea7bd8c4267f040945e05 datapathConfiguration="&{false false false false false }" interface=lxc99d2ff0fe86a k8sPodName=local-path-storage/helper-pod-create-pvc-1bdcbe61-ec26-41bd-ae76-ed47f0097e1b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58fe7ed417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1bdcbe61-ec26-41bd-ae76-ed47f0097e1b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58fe7ed417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1bdcbe61-ec26-41bd-ae76-ed47f0097e1b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58fe7ed417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=8389 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1bdcbe61-ec26-41bd-ae76-ed47f0097e1b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58fe7ed417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=8389 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1bdcbe61-ec26-41bd-ae76-ed47f0097e1b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58fe7ed417 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=167 identity=8389 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1bdcbe61-ec26-41bd-ae76-ed47f0097e1b subsys=endpoint level=info msg="Successful endpoint creation" containerID=58fe7ed417 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=167 identity=8389 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1bdcbe61-ec26-41bd-ae76-ed47f0097e1b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.18 5eb713b8-f3fc-45de-b7f8-8cad70f4d31a default }" containerID=36cccbe1b7a4921cecbc6e279cc47c09f21bf945a606c3cfdbcd0e4729795ab3 datapathConfiguration="&{false false false false false }" interface=lxc6970b9593de3 k8sPodName=monitoring/vector-pqvkk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36cccbe1b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-pqvkk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36cccbe1b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-pqvkk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36cccbe1b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 identity=21180 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-pqvkk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36cccbe1b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 identity=21180 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-pqvkk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=36cccbe1b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2964 identity=21180 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-pqvkk subsys=endpoint level=info msg="Successful endpoint creation" containerID=36cccbe1b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2964 identity=21180 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-pqvkk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=58fe7ed417 endpointID=167 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1bdcbe61-ec26-41bd-ae76-ed47f0097e1b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=58fe7ed417 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=167 identity=8389 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1bdcbe61-ec26-41bd-ae76-ed47f0097e1b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 2a8ea8f6-8fb0-4f51-a35f-eca010f564c8 default }" containerID=326a599023f06c41e792af3c99f9f02974061bc665750c53973c83c81ac1588b datapathConfiguration="&{false false false false false }" interface=lxcb89d91a8e57e k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=326a599023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=326a599023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=326a599023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=326a599023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identity=4469 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=326a599023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identity=4469 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=326a599023 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1565 identity=4469 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=326a599023 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1565 identity=4469 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.203 853454c3-2932-44fc-a751-88e7d426d330 default }" containerID=3f4a6a2df5ee41e091a81e497554be26324db191d94a87dc1c0dc5844002b49d datapathConfiguration="&{false false false false false }" interface=lxcef09e2c35c8c k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-j8dzx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f4a6a2df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2141 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-j8dzx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f4a6a2df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2141 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-j8dzx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f4a6a2df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2141 identity=62456 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-j8dzx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f4a6a2df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2141 identity=62456 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-j8dzx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f4a6a2df5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2141 identity=62456 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-j8dzx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f4a6a2df5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2141 identity=62456 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-j8dzx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.80 47cd51e1-6493-4f7b-bc12-5f29b02d7bc1 default }" containerID=49d94b6e5a2a4280e163fa68e7c9548fb8a2b4590a2e9adc973b99d1c7b6122b datapathConfiguration="&{false false false false false }" interface=lxc4a6b8d5430d6 k8sPodName=openstack/memcached-memcached-6479589586-kml54 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49d94b6e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kml54 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49d94b6e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kml54 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=49d94b6e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kml54 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49d94b6e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 identity=6459 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kml54 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49d94b6e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 identity=6459 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kml54 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49d94b6e5a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1968 identity=6459 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kml54 subsys=endpoint level=info msg="Successful endpoint creation" containerID=49d94b6e5a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1968 identity=6459 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kml54 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.227 d46b09ec-f9a1-47aa-a4d2-5d4cf3c0d442 default }" containerID=c2fad752217ba376c2e53fbc0f8e2b3f13a43585244097406b3a3a9332c7c5fc datapathConfiguration="&{false false false false false }" interface=lxc976d2cad8c61 k8sPodName=local-path-storage/helper-pod-create-pvc-96d2df8e-3f16-4202-9692-732faa3f3f63 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2fad75221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1218 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96d2df8e-3f16-4202-9692-732faa3f3f63 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2fad75221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1218 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96d2df8e-3f16-4202-9692-732faa3f3f63 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2fad75221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1218 identity=8389 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96d2df8e-3f16-4202-9692-732faa3f3f63 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2fad75221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1218 identity=8389 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96d2df8e-3f16-4202-9692-732faa3f3f63 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c2fad75221 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1218 identity=8389 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96d2df8e-3f16-4202-9692-732faa3f3f63 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2fad75221 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1218 identity=8389 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96d2df8e-3f16-4202-9692-732faa3f3f63 subsys=daemon level=info msg="Delete endpoint request" containerID=c2fad75221 endpointID=1218 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-96d2df8e-3f16-4202-9692-732faa3f3f63 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c2fad75221 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1218 identity=8389 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96d2df8e-3f16-4202-9692-732faa3f3f63 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 b277d41a-bea9-4842-aa88-c7e331c4d011 default }" containerID=3dbb8550011686272e63a541331a177e5e0efeb1a6d5c86e2f8b8cbc2b663fa7 datapathConfiguration="&{false false false false false }" interface=lxc2e9bd3a5cf2b k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3dbb855001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3dbb855001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3dbb855001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3dbb855001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identity=3366 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3dbb855001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identity=3366 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3dbb855001 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1139 identity=3366 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3dbb855001 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1139 identity=3366 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 d5d014f0-7062-41a1-941e-3b5752832dd1 default }" containerID=1af2b536332987ad84d2f90000682d8f27c8a020abd9cba1e78221ff3560b75c datapathConfiguration="&{false false false false false }" interface=lxca3576c23183b k8sPodName=openstack/keystone-api-77b99d5465-qsslw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1af2b53633 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1447 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-api-77b99d5465-qsslw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1af2b53633 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1447 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-api-77b99d5465-qsslw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1af2b53633 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1447 identity=4225 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-api-77b99d5465-qsslw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1af2b53633 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1447 identity=4225 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-api-77b99d5465-qsslw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.40 6f27775b-d1b4-4853-8af7-ed0f3666dc96 default }" containerID=6a91ab82ed2d66cb146462b3e1761dae4c3e48b1e24445ebc036710d02cd36f9 datapathConfiguration="&{false false false false false }" interface=lxc46e8ee5951ec k8sPodName=openstack/keystone-credential-setup-vrmx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a91ab82ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-credential-setup-vrmx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a91ab82ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5beeb996-f5fa-4d0a-afaa-dde8f0fd38b1,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=5beeb996-f5fa-4d0a-afaa-dde8f0fd38b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-credential-setup-vrmx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5beeb996-f5fa-4d0a-afaa-dde8f0fd38b1;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=5beeb996-f5fa-4d0a-afaa-dde8f0fd38b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a91ab82ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=4004 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5beeb996-f5fa-4d0a-afaa-dde8f0fd38b1,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=5beeb996-f5fa-4d0a-afaa-dde8f0fd38b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-credential-setup-vrmx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a91ab82ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=4004 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-credential-setup-vrmx9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1af2b53633 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1447 identity=4225 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-api-77b99d5465-qsslw subsys=endpoint level=info msg="Successful endpoint creation" containerID=1af2b53633 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1447 identity=4225 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-api-77b99d5465-qsslw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6a91ab82ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=82 identity=4004 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-credential-setup-vrmx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a91ab82ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=82 identity=4004 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-credential-setup-vrmx9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6a91ab82ed endpointID=82 k8sNamespace=openstack k8sPodName=keystone-credential-setup-vrmx9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5beeb996-f5fa-4d0a-afaa-dde8f0fd38b1 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=5beeb996-f5fa-4d0a-afaa-dde8f0fd38b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6a91ab82ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=82 identity=4004 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-credential-setup-vrmx9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 d052c0e2-2c49-4552-a56b-836dbabfe3f6 default }" containerID=e960eb9c5296a7c6a623785e55db012b82a551701a442c08beed5a34935c48bd datapathConfiguration="&{false false false false false }" interface=lxcd0264bfa115c k8sPodName=openstack/keystone-db-init-dcg5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e960eb9c52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/keystone-db-init-dcg5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e960eb9c52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0059fdc7-0c41-47cb-a0da-7ffa9588eabb,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=0059fdc7-0c41-47cb-a0da-7ffa9588eabb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/keystone-db-init-dcg5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e960eb9c52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.219 ipv6= k8sPodName=openstack/keystone-db-init-dcg5z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0059fdc7-0c41-47cb-a0da-7ffa9588eabb;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=0059fdc7-0c41-47cb-a0da-7ffa9588eabb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e960eb9c52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identity=45407 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0059fdc7-0c41-47cb-a0da-7ffa9588eabb,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=0059fdc7-0c41-47cb-a0da-7ffa9588eabb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/keystone-db-init-dcg5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e960eb9c52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identity=45407 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/keystone-db-init-dcg5z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e960eb9c52 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=741 identity=45407 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/keystone-db-init-dcg5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=e960eb9c52 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=741 identity=45407 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/keystone-db-init-dcg5z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e960eb9c52 endpointID=741 k8sNamespace=openstack k8sPodName=keystone-db-init-dcg5z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0059fdc7-0c41-47cb-a0da-7ffa9588eabb k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=0059fdc7-0c41-47cb-a0da-7ffa9588eabb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e960eb9c52 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=741 identity=45407 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/keystone-db-init-dcg5z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 b2745618-4483-4f07-860a-09e6fcc83c25 default }" containerID=c3d5f75a22b91db7ea5e173b1066736755a9de7eee3b7b89803fb7ac00815a86 datapathConfiguration="&{false false false false false }" interface=lxca6446cb2be26 k8sPodName=openstack/keystone-fernet-setup-djlnf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3d5f75a22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-fernet-setup-djlnf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3d5f75a22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=060c3875-01c7-43df-9316-6b17b9f4fb01,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=060c3875-01c7-43df-9316-6b17b9f4fb01,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-fernet-setup-djlnf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c3d5f75a22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-fernet-setup-djlnf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=060c3875-01c7-43df-9316-6b17b9f4fb01;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=060c3875-01c7-43df-9316-6b17b9f4fb01;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3d5f75a22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identity=30695 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=060c3875-01c7-43df-9316-6b17b9f4fb01,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=060c3875-01c7-43df-9316-6b17b9f4fb01,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-fernet-setup-djlnf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3d5f75a22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identity=30695 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-fernet-setup-djlnf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3d5f75a22 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=37 identity=30695 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-fernet-setup-djlnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3d5f75a22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=37 identity=30695 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-fernet-setup-djlnf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c3d5f75a22 endpointID=37 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-djlnf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=060c3875-01c7-43df-9316-6b17b9f4fb01 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=060c3875-01c7-43df-9316-6b17b9f4fb01 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c3d5f75a22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=37 identity=30695 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-fernet-setup-djlnf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 60537984-8578-40ff-a728-61e9fa1b21f1 default }" containerID=b8c6d9c052a3d5e23c5535524959270f0903edab9c5f9d190e4ba4a390d2635a datapathConfiguration="&{false false false false false }" interface=lxcbdf9d76c30a3 k8sPodName=openstack/keystone-db-sync-vv2h5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8c6d9c052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3162 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-db-sync-vv2h5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8c6d9c052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3162 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5b2efca7-5b30-4914-88a3-8fc3f4885b81,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=5b2efca7-5b30-4914-88a3-8fc3f4885b81,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-db-sync-vv2h5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b8c6d9c052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3162 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-db-sync-vv2h5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5b2efca7-5b30-4914-88a3-8fc3f4885b81;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=5b2efca7-5b30-4914-88a3-8fc3f4885b81;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8c6d9c052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3162 identity=58806 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5b2efca7-5b30-4914-88a3-8fc3f4885b81,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=5b2efca7-5b30-4914-88a3-8fc3f4885b81,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-db-sync-vv2h5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8c6d9c052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3162 identity=58806 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-db-sync-vv2h5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8c6d9c052 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3162 identity=58806 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-db-sync-vv2h5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8c6d9c052 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3162 identity=58806 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-db-sync-vv2h5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b8c6d9c052 endpointID=3162 k8sNamespace=openstack k8sPodName=keystone-db-sync-vv2h5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5b2efca7-5b30-4914-88a3-8fc3f4885b81 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=5b2efca7-5b30-4914-88a3-8fc3f4885b81 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b8c6d9c052 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3162 identity=58806 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-db-sync-vv2h5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 2f17f7b0-1278-48b1-b404-51b5633fd1ea default }" containerID=bba58517ec4082dd9b74099d2e1b49414d4b66d5bfd4d293c816772a841f4dc9 datapathConfiguration="&{false false false false false }" interface=lxc68b3b72d781b k8sPodName=openstack/keystone-rabbit-init-v67g7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bba58517ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-rabbit-init-v67g7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bba58517ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a31f2002-3cf3-4011-9155-044cf448d7c1,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a31f2002-3cf3-4011-9155-044cf448d7c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-rabbit-init-v67g7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a31f2002-3cf3-4011-9155-044cf448d7c1;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a31f2002-3cf3-4011-9155-044cf448d7c1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bba58517ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=11045 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a31f2002-3cf3-4011-9155-044cf448d7c1,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a31f2002-3cf3-4011-9155-044cf448d7c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-rabbit-init-v67g7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bba58517ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=11045 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-rabbit-init-v67g7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bba58517ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1559 identity=11045 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-rabbit-init-v67g7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bba58517ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1559 identity=11045 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-rabbit-init-v67g7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bba58517ec endpointID=1559 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-v67g7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a31f2002-3cf3-4011-9155-044cf448d7c1 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a31f2002-3cf3-4011-9155-044cf448d7c1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bba58517ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1559 identity=11045 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-rabbit-init-v67g7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 cb0ce745-9885-4cec-acf9-1e685c950c3f default }" containerID=bf10d84aa3fc49e84f8f61f15a5847c6cd1b95ecbc0ac2a7aaef6f5781bcefaf datapathConfiguration="&{false false false false false }" interface=lxcdf1fbca82286 k8sPodName=openstack/keystone-domain-manage-8mgfj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf10d84aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-domain-manage-8mgfj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf10d84aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=497ce0be-c226-47e0-ad13-db77ecff07a1,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=497ce0be-c226-47e0-ad13-db77ecff07a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-domain-manage-8mgfj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bf10d84aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-domain-manage-8mgfj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=497ce0be-c226-47e0-ad13-db77ecff07a1;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=497ce0be-c226-47e0-ad13-db77ecff07a1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf10d84aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 identity=50989 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=497ce0be-c226-47e0-ad13-db77ecff07a1,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=497ce0be-c226-47e0-ad13-db77ecff07a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-domain-manage-8mgfj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf10d84aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 identity=50989 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-domain-manage-8mgfj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf10d84aa3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1002 identity=50989 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-domain-manage-8mgfj subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf10d84aa3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1002 identity=50989 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-domain-manage-8mgfj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bf10d84aa3 endpointID=1002 k8sNamespace=openstack k8sPodName=keystone-domain-manage-8mgfj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=497ce0be-c226-47e0-ad13-db77ecff07a1 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=497ce0be-c226-47e0-ad13-db77ecff07a1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bf10d84aa3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1002 identity=50989 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-domain-manage-8mgfj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 ce5364bb-2f74-47fa-9514-a14acafe6ded default }" containerID=90f8611ca3ea3e2da1147eafc6af1ad7f16db13599e84971f5d33b4bf0e34e9f datapathConfiguration="&{false false false false false }" interface=lxcfbbf6d2b420e k8sPodName=openstack/keystone-bootstrap-gfvsn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90f8611ca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2911 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-bootstrap-gfvsn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90f8611ca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2911 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=69c6f6bc-4c5f-45be-af81-40f14deb4117,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=69c6f6bc-4c5f-45be-af81-40f14deb4117,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-bootstrap-gfvsn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=69c6f6bc-4c5f-45be-af81-40f14deb4117;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=69c6f6bc-4c5f-45be-af81-40f14deb4117;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=90f8611ca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2911 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-bootstrap-gfvsn line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=90f8611ca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2911 identity=18442 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=69c6f6bc-4c5f-45be-af81-40f14deb4117,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=69c6f6bc-4c5f-45be-af81-40f14deb4117,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-bootstrap-gfvsn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90f8611ca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2911 identity=18442 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-bootstrap-gfvsn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90f8611ca3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2911 identity=18442 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-bootstrap-gfvsn subsys=endpoint level=info msg="Successful endpoint creation" containerID=90f8611ca3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2911 identity=18442 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-bootstrap-gfvsn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=90f8611ca3 endpointID=2911 k8sNamespace=openstack k8sPodName=keystone-bootstrap-gfvsn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=69c6f6bc-4c5f-45be-af81-40f14deb4117 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=69c6f6bc-4c5f-45be-af81-40f14deb4117 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=90f8611ca3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2911 identity=18442 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/keystone-bootstrap-gfvsn subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.0339490308006547 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.223 3ac26388-4775-46de-9003-103104e130bb default }" containerID=09b97e1f1d132ceb41f7991e888fca4959b2a2e3a4f896769f5ef6a0fc66a512 datapathConfiguration="&{false false false false false }" interface=lxcab31d9a11914 k8sPodName=local-path-storage/helper-pod-create-pvc-3dc320b0-b58a-49ed-be4b-c1197e190603 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09b97e1f1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dc320b0-b58a-49ed-be4b-c1197e190603 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09b97e1f1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dc320b0-b58a-49ed-be4b-c1197e190603 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09b97e1f1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 identity=8389 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dc320b0-b58a-49ed-be4b-c1197e190603 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09b97e1f1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 identity=8389 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dc320b0-b58a-49ed-be4b-c1197e190603 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09b97e1f1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1785 identity=8389 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dc320b0-b58a-49ed-be4b-c1197e190603 subsys=endpoint level=info msg="Successful endpoint creation" containerID=09b97e1f1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1785 identity=8389 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dc320b0-b58a-49ed-be4b-c1197e190603 subsys=daemon level=info msg="Delete endpoint request" containerID=09b97e1f1d endpointID=1785 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3dc320b0-b58a-49ed-be4b-c1197e190603 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=09b97e1f1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1785 identity=8389 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dc320b0-b58a-49ed-be4b-c1197e190603 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 615b802d-070b-4a39-8838-ab4a9925fa37 default }" containerID=1fc6d43df0770bcfe9235f91460bf2bca842f65c0bc07cfde90e79d8b8c001bb datapathConfiguration="&{false false false false false }" interface=lxc07758034cc65 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fc6d43df0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fc6d43df0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1fc6d43df0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 identity=20489 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fc6d43df0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 identity=20489 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1fc6d43df0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2106 identity=20489 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fc6d43df0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2106 identity=20489 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 6893f9b4-2a43-4ae1-8a0a-853e6a2fb1b1 default }" containerID=8e31fc37d0b824a1ae5ddd25ec4970abe38f05b5db2adf0fce217d4e63cb91be datapathConfiguration="&{false false false false false }" interface=lxcc41089a7cc7c k8sPodName=openstack/barbican-api-649d955f9c-42nqj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e31fc37d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-api-649d955f9c-42nqj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e31fc37d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-api-649d955f9c-42nqj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8e31fc37d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-api-649d955f9c-42nqj line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8e31fc37d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 identity=9132 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-api-649d955f9c-42nqj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e31fc37d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 identity=9132 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-api-649d955f9c-42nqj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 22460409-0f13-498f-9a6a-8b5e95dfc424 default }" containerID=0d1f2787a71f315e8b929dd1a7992335670c92fb728fab48bc457d2fb8758f72 datapathConfiguration="&{false false false false false }" interface=lxc21b0bc4b91e0 k8sPodName=openstack/barbican-db-init-cw2s2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d1f2787a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-db-init-cw2s2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d1f2787a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=05a537ea-ed13-4fa5-83be-ccac56da2e1e,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=05a537ea-ed13-4fa5-83be-ccac56da2e1e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-db-init-cw2s2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=05a537ea-ed13-4fa5-83be-ccac56da2e1e;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=05a537ea-ed13-4fa5-83be-ccac56da2e1e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d1f2787a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identity=37884 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=05a537ea-ed13-4fa5-83be-ccac56da2e1e,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=05a537ea-ed13-4fa5-83be-ccac56da2e1e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-db-init-cw2s2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d1f2787a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identity=37884 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-db-init-cw2s2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e31fc37d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1273 identity=9132 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-api-649d955f9c-42nqj subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e31fc37d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1273 identity=9132 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-api-649d955f9c-42nqj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0d1f2787a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=651 identity=37884 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-db-init-cw2s2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d1f2787a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=651 identity=37884 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-db-init-cw2s2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0d1f2787a7 endpointID=651 k8sNamespace=openstack k8sPodName=barbican-db-init-cw2s2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=05a537ea-ed13-4fa5-83be-ccac56da2e1e k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=05a537ea-ed13-4fa5-83be-ccac56da2e1e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0d1f2787a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=651 identity=37884 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-db-init-cw2s2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 cf28d6ac-f31c-4d8a-b46e-c4ff65030b46 default }" containerID=d5cb7bf277622fda5fb555458eb28153cab1f0a4ffda271a8db736535a524364 datapathConfiguration="&{false false false false false }" interface=lxcc60ca7e84410 k8sPodName=openstack/barbican-db-sync-h9pm7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5cb7bf277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-sync-h9pm7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5cb7bf277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=291f895d-abe6-4177-bb1f-25fadc8d39fb,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=291f895d-abe6-4177-bb1f-25fadc8d39fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-sync-h9pm7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d5cb7bf277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-sync-h9pm7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=291f895d-abe6-4177-bb1f-25fadc8d39fb;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=291f895d-abe6-4177-bb1f-25fadc8d39fb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5cb7bf277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=43185 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=291f895d-abe6-4177-bb1f-25fadc8d39fb,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=291f895d-abe6-4177-bb1f-25fadc8d39fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-sync-h9pm7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5cb7bf277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=43185 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-sync-h9pm7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5cb7bf277 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=89 identity=43185 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-sync-h9pm7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5cb7bf277 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=89 identity=43185 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-sync-h9pm7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d5cb7bf277 endpointID=89 k8sNamespace=openstack k8sPodName=barbican-db-sync-h9pm7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=291f895d-abe6-4177-bb1f-25fadc8d39fb k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=291f895d-abe6-4177-bb1f-25fadc8d39fb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d5cb7bf277 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=89 identity=43185 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-sync-h9pm7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 05c74f65-3788-40b9-98b4-a7ff291e1873 default }" containerID=6d3448eca9d906126546d2507e6b2b342aad45f4865fa4b4e1c73c874a6a901b datapathConfiguration="&{false false false false false }" interface=lxc273b15fab49c k8sPodName=openstack/barbican-rabbit-init-z262x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d3448eca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-rabbit-init-z262x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d3448eca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b00beacc-8878-481a-a9b1-fa2033ea52f9,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b00beacc-8878-481a-a9b1-fa2033ea52f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-rabbit-init-z262x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b00beacc-8878-481a-a9b1-fa2033ea52f9;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b00beacc-8878-481a-a9b1-fa2033ea52f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d3448eca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 identity=20798 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b00beacc-8878-481a-a9b1-fa2033ea52f9,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b00beacc-8878-481a-a9b1-fa2033ea52f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-rabbit-init-z262x oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6d3448eca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 identity=20798 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-rabbit-init-z262x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d3448eca9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2723 identity=20798 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-rabbit-init-z262x subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d3448eca9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2723 identity=20798 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-rabbit-init-z262x subsys=daemon level=info msg="Delete endpoint request" containerID=6d3448eca9 endpointID=2723 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-z262x subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b00beacc-8878-481a-a9b1-fa2033ea52f9 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b00beacc-8878-481a-a9b1-fa2033ea52f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6d3448eca9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2723 identity=20798 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-rabbit-init-z262x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 19b88a02-c27d-4aa3-8fa5-b24e2bd3f335 default }" containerID=edff304e23999744f0305a82b373e1a3bfae2b57a07df969746491f1b62c4360 datapathConfiguration="&{false false false false false }" interface=lxcb93916c7657a k8sPodName=openstack/barbican-ks-service-d29b9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edff304e23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=847 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-service-d29b9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edff304e23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=847 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0124ad12-a836-44b6-a731-a452fc0105ee,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=0124ad12-a836-44b6-a731-a452fc0105ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-service-d29b9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0124ad12-a836-44b6-a731-a452fc0105ee;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=0124ad12-a836-44b6-a731-a452fc0105ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edff304e23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=847 identity=14501 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0124ad12-a836-44b6-a731-a452fc0105ee,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=0124ad12-a836-44b6-a731-a452fc0105ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-service-d29b9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edff304e23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=847 identity=14501 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-service-d29b9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=edff304e23 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=847 identity=14501 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-service-d29b9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=edff304e23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=847 identity=14501 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-service-d29b9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=edff304e23 endpointID=847 k8sNamespace=openstack k8sPodName=barbican-ks-service-d29b9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0124ad12-a836-44b6-a731-a452fc0105ee k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=0124ad12-a836-44b6-a731-a452fc0105ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=edff304e23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=847 identity=14501 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-service-d29b9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 ce7f0fa6-8d52-4777-994a-95961469794d default }" containerID=89a24783ca3d1d7550e24ccd2001a71abfefd4509a30950ed29f16cc1ce93e16 datapathConfiguration="&{false false false false false }" interface=lxc3e27948d29cb k8sPodName=openstack/barbican-ks-endpoints-nk4zv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89a24783ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2097 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-ks-endpoints-nk4zv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89a24783ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2097 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e30bb4cd-b84f-4542-bbf7-457c12d6ae0e,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e30bb4cd-b84f-4542-bbf7-457c12d6ae0e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-ks-endpoints-nk4zv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e30bb4cd-b84f-4542-bbf7-457c12d6ae0e;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=e30bb4cd-b84f-4542-bbf7-457c12d6ae0e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89a24783ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2097 identity=62321 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e30bb4cd-b84f-4542-bbf7-457c12d6ae0e,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e30bb4cd-b84f-4542-bbf7-457c12d6ae0e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-ks-endpoints-nk4zv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89a24783ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2097 identity=62321 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-ks-endpoints-nk4zv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=89a24783ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2097 identity=62321 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-ks-endpoints-nk4zv subsys=endpoint level=info msg="Successful endpoint creation" containerID=89a24783ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2097 identity=62321 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-ks-endpoints-nk4zv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=89a24783ca endpointID=2097 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-nk4zv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e30bb4cd-b84f-4542-bbf7-457c12d6ae0e k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=e30bb4cd-b84f-4542-bbf7-457c12d6ae0e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=89a24783ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2097 identity=62321 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-ks-endpoints-nk4zv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 6e7b1261-5f32-4852-8a26-b1f1ca0b651a default }" containerID=77ef917fd5d631366ec16cc44d4a7a6b9c889f1d039df19694380cb59a6325a0 datapathConfiguration="&{false false false false false }" interface=lxc5dad841a283f k8sPodName=openstack/barbican-ks-user-t5v2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77ef917fd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-user-t5v2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77ef917fd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c694e844-52ec-4bd4-957f-4d6dd1136e53,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=c694e844-52ec-4bd4-957f-4d6dd1136e53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-user-t5v2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c694e844-52ec-4bd4-957f-4d6dd1136e53;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=c694e844-52ec-4bd4-957f-4d6dd1136e53;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77ef917fd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identity=4272 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c694e844-52ec-4bd4-957f-4d6dd1136e53,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=c694e844-52ec-4bd4-957f-4d6dd1136e53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-user-t5v2k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77ef917fd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identity=4272 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-user-t5v2k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=77ef917fd5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=551 identity=4272 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-user-t5v2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=77ef917fd5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=551 identity=4272 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-user-t5v2k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=77ef917fd5 endpointID=551 k8sNamespace=openstack k8sPodName=barbican-ks-user-t5v2k subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c694e844-52ec-4bd4-957f-4d6dd1136e53 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=c694e844-52ec-4bd4-957f-4d6dd1136e53 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=77ef917fd5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=551 identity=4272 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-user-t5v2k subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.185 23d1e765-1673-4559-a983-e52c7e17acea default }" containerID=02d2c22c3390cc1325b57e6e3273578c51f0a4d7db7a2af191eaf90e70de0b2b datapathConfiguration="&{false false false false false }" interface=lxc66f5c99feb14 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gdv52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02d2c22c33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 ipv4=10.0.0.185 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gdv52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02d2c22c33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.185 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gdv52 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=02d2c22c33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.185 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gdv52 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02d2c22c33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identity=59519 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.185 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gdv52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02d2c22c33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identity=59519 ipv4=10.0.0.185 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gdv52 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02d2c22c33 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=355 identity=59519 ipv4=10.0.0.185 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gdv52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=02d2c22c33 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=355 identity=59519 ipv4=10.0.0.185 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gdv52 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 d7c42ab8-a63f-4330-8b5e-f703fd5226a6 default }" containerID=320d073b1a65661fb6aaaf91634909f62a8465b13d3abf1fcaeea56e5f133423 datapathConfiguration="&{false false false false false }" interface=lxce15f7bd9428f k8sPodName=openstack/rook-ceph-detect-version-95gmp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=320d073b1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=674 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-detect-version-95gmp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=320d073b1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=674 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=2aa625ee-328f-47b5-b057-81dc77b5d8b5,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=2aa625ee-328f-47b5-b057-81dc77b5d8b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-detect-version-95gmp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=2aa625ee-328f-47b5-b057-81dc77b5d8b5;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=2aa625ee-328f-47b5-b057-81dc77b5d8b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=320d073b1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=674 identity=3154 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=2aa625ee-328f-47b5-b057-81dc77b5d8b5,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=2aa625ee-328f-47b5-b057-81dc77b5d8b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-detect-version-95gmp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=320d073b1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=674 identity=3154 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-detect-version-95gmp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=320d073b1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=674 identity=3154 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-detect-version-95gmp subsys=endpoint level=info msg="Successful endpoint creation" containerID=320d073b1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=674 identity=3154 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-detect-version-95gmp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=320d073b1a endpointID=674 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-95gmp subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=2aa625ee-328f-47b5-b057-81dc77b5d8b5 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=2aa625ee-328f-47b5-b057-81dc77b5d8b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=320d073b1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=674 identity=3154 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-detect-version-95gmp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 9fda2c6c-9f23-4c30-b97b-921f2a458db8 default }" containerID=f8617f2579034ba632f9a7681f49dd875fbaba057fc8ced1ebad2dbe38a665e3 datapathConfiguration="&{false false false false false }" interface=lxcc94717cffb45 k8sPodName=local-path-storage/helper-pod-create-pvc-4f534ca1-5453-4dd6-bb79-454caf7abeee labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8617f2579 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2740 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f534ca1-5453-4dd6-bb79-454caf7abeee subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8617f2579 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2740 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f534ca1-5453-4dd6-bb79-454caf7abeee subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8617f2579 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2740 identity=8389 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f534ca1-5453-4dd6-bb79-454caf7abeee oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8617f2579 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2740 identity=8389 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f534ca1-5453-4dd6-bb79-454caf7abeee subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8617f2579 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2740 identity=8389 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f534ca1-5453-4dd6-bb79-454caf7abeee subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8617f2579 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2740 identity=8389 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f534ca1-5453-4dd6-bb79-454caf7abeee subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.231 bbbd92ff-b83d-4bbf-b680-b280e9910a9e default }" containerID=314a234f6e93c2b97bd0ba0bd4ff6a9bd03c0abe2d3d2b664380af3b08290aa5 datapathConfiguration="&{false false false false false }" interface=lxc9b42d207f413 k8sPodName=openstack/ceph-object-controller-detect-version-g8d8w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=314a234f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-g8d8w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=314a234f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=61a614b6-ae55-4d04-97f3-dfda6ab40d07,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=61a614b6-ae55-4d04-97f3-dfda6ab40d07,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-g8d8w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=314a234f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.231 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-g8d8w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=61a614b6-ae55-4d04-97f3-dfda6ab40d07;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=61a614b6-ae55-4d04-97f3-dfda6ab40d07;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=314a234f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 identity=14330 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=61a614b6-ae55-4d04-97f3-dfda6ab40d07,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=61a614b6-ae55-4d04-97f3-dfda6ab40d07,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-g8d8w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=314a234f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 identity=14330 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-g8d8w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=314a234f6e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2086 identity=14330 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-g8d8w subsys=endpoint level=info msg="Successful endpoint creation" containerID=314a234f6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2086 identity=14330 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-g8d8w subsys=daemon level=info msg="Delete endpoint request" containerID=f8617f2579 endpointID=2740 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4f534ca1-5453-4dd6-bb79-454caf7abeee subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f8617f2579 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2740 identity=8389 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f534ca1-5453-4dd6-bb79-454caf7abeee subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=314a234f6e endpointID=2086 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-g8d8w subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=61a614b6-ae55-4d04-97f3-dfda6ab40d07 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=61a614b6-ae55-4d04-97f3-dfda6ab40d07 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=314a234f6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2086 identity=14330 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-g8d8w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 bd5352d9-366d-4636-869b-be39c5d001df default }" containerID=2dce6e968f3d7a5f53820b8559f2c5e4155cb0b41e6fb64a3bc3cf7fe451688a datapathConfiguration="&{false false false false false }" interface=lxc3d052fc25920 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dce6e968f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dce6e968f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2dce6e968f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2dce6e968f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 identity=16854 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2dce6e968f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 identity=16854 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2dce6e968f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2456 identity=16854 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dce6e968f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2456 identity=16854 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.155 7c59708a-4454-482c-a8c0-ad3053f1804c default }" containerID=e42204d52baba823144e8716a6182aee702b96d4165c6e8d3389da477840c93b datapathConfiguration="&{false false false false false }" interface=lxcb5c3d2d29b7c k8sPodName=openstack/glance-db-init-4vvxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e42204d52b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2212 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-init-4vvxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e42204d52b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2212 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=25cb1380-1f19-41f1-9277-dab4c0913245,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=25cb1380-1f19-41f1-9277-dab4c0913245,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-init-4vvxm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=25cb1380-1f19-41f1-9277-dab4c0913245;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=25cb1380-1f19-41f1-9277-dab4c0913245;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e42204d52b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2212 identity=57456 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=25cb1380-1f19-41f1-9277-dab4c0913245,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=25cb1380-1f19-41f1-9277-dab4c0913245,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-init-4vvxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e42204d52b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2212 identity=57456 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-init-4vvxm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e42204d52b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2212 identity=57456 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-init-4vvxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=e42204d52b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2212 identity=57456 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-init-4vvxm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e42204d52b endpointID=2212 k8sNamespace=openstack k8sPodName=glance-db-init-4vvxm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=25cb1380-1f19-41f1-9277-dab4c0913245 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=25cb1380-1f19-41f1-9277-dab4c0913245 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e42204d52b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2212 identity=57456 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-init-4vvxm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 0a13f82a-cb58-4a14-a733-8430ea960ce0 default }" containerID=bb335e4d6cdbf8cdcbdde412bc70e88e7345bf303c8ac15aec59d79e2dcbb4bc datapathConfiguration="&{false false false false false }" interface=lxcaaddf6ed0052 k8sPodName=openstack/glance-db-sync-xmbpr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb335e4d6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-sync-xmbpr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb335e4d6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b688fd49-3b1b-461e-bfd8-9d8f7c17fc3a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=b688fd49-3b1b-461e-bfd8-9d8f7c17fc3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-sync-xmbpr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b688fd49-3b1b-461e-bfd8-9d8f7c17fc3a;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=b688fd49-3b1b-461e-bfd8-9d8f7c17fc3a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb335e4d6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 identity=26332 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b688fd49-3b1b-461e-bfd8-9d8f7c17fc3a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=b688fd49-3b1b-461e-bfd8-9d8f7c17fc3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-sync-xmbpr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bb335e4d6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2378 identity=26332 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-sync-xmbpr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb335e4d6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2378 identity=26332 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-sync-xmbpr subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb335e4d6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2378 identity=26332 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-sync-xmbpr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.122 3547f88c-051e-48e1-8fe0-87a8ed83a5b9 default }" containerID=1da0cf6cf144a33e1dbbc2f786eca294494c90929271afdaad3ddcbcb8e45ed1 datapathConfiguration="&{false false false false false }" interface=lxc62b3d8d0f0df k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-mnlnw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1da0cf6cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-mnlnw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1da0cf6cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-mnlnw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1da0cf6cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-mnlnw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1da0cf6cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 identity=50241 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-mnlnw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1da0cf6cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 identity=50241 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-mnlnw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 ff8b9d9c-5126-44fd-89ed-fa49fc49eea5 default }" containerID=776879e1cce944e89ce2531b95a7d20916600b08794b56e5a0ab7ebabf28ecee datapathConfiguration="&{false false false false false }" interface=lxc63e323764691 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-njrjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=776879e1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-njrjt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=776879e1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-njrjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=776879e1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=29926 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-njrjt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=776879e1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=29926 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-njrjt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1da0cf6cf1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2530 identity=50241 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-mnlnw subsys=endpoint level=info msg="Successful endpoint creation" containerID=1da0cf6cf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2530 identity=50241 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-mnlnw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=776879e1cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=561 identity=29926 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-njrjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=776879e1cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=561 identity=29926 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-njrjt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb335e4d6c endpointID=2378 k8sNamespace=openstack k8sPodName=glance-db-sync-xmbpr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b688fd49-3b1b-461e-bfd8-9d8f7c17fc3a k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=b688fd49-3b1b-461e-bfd8-9d8f7c17fc3a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bb335e4d6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2378 identity=26332 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-sync-xmbpr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 0701131e-65f5-4ea5-b20c-2575c0ea17d1 default }" containerID=e65ed2a0b3c4240acc06df28bfd2c7cc3eb1aa6a55972bd940873d6d899349a6 datapathConfiguration="&{false false false false false }" interface=lxca0b7edeaf5c9 k8sPodName=openstack/glance-rabbit-init-smls2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e65ed2a0b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-rabbit-init-smls2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e65ed2a0b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a40d67fc-092a-49e1-93fc-802cdfe8f67c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a40d67fc-092a-49e1-93fc-802cdfe8f67c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-rabbit-init-smls2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a40d67fc-092a-49e1-93fc-802cdfe8f67c;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a40d67fc-092a-49e1-93fc-802cdfe8f67c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e65ed2a0b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identity=20586 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a40d67fc-092a-49e1-93fc-802cdfe8f67c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a40d67fc-092a-49e1-93fc-802cdfe8f67c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-rabbit-init-smls2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e65ed2a0b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identity=20586 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-rabbit-init-smls2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e65ed2a0b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1244 identity=20586 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-rabbit-init-smls2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e65ed2a0b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1244 identity=20586 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-rabbit-init-smls2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e65ed2a0b3 endpointID=1244 k8sNamespace=openstack k8sPodName=glance-rabbit-init-smls2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a40d67fc-092a-49e1-93fc-802cdfe8f67c k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a40d67fc-092a-49e1-93fc-802cdfe8f67c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e65ed2a0b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1244 identity=20586 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-rabbit-init-smls2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 dbbef36f-1c68-4225-acee-c95564d96012 default }" containerID=bea5f77dd0282716765445f099d858238314e35ec048fd573c2003fb0ca82d74 datapathConfiguration="&{false false false false false }" interface=lxce47036604e64 k8sPodName=openstack/glance-ks-service-l652w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bea5f77dd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-l652w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bea5f77dd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=87c67d67-4103-43ac-99ac-a9d488ed8682,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=87c67d67-4103-43ac-99ac-a9d488ed8682,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-l652w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bea5f77dd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-l652w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=87c67d67-4103-43ac-99ac-a9d488ed8682;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=87c67d67-4103-43ac-99ac-a9d488ed8682;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bea5f77dd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 identity=6448 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=87c67d67-4103-43ac-99ac-a9d488ed8682,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=87c67d67-4103-43ac-99ac-a9d488ed8682,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-l652w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bea5f77dd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 identity=6448 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-l652w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bea5f77dd0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1900 identity=6448 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-l652w subsys=endpoint level=info msg="Successful endpoint creation" containerID=bea5f77dd0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1900 identity=6448 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-l652w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bea5f77dd0 endpointID=1900 k8sNamespace=openstack k8sPodName=glance-ks-service-l652w subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=87c67d67-4103-43ac-99ac-a9d488ed8682 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=87c67d67-4103-43ac-99ac-a9d488ed8682 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bea5f77dd0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1900 identity=6448 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-ks-service-l652w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 a99be5aa-72b4-4d89-acf4-2d444ddc136c default }" containerID=1ee9a49c4b9c6a5595dc8e9687a9bd0404f3949a0311ea1cef16135f54dd8234 datapathConfiguration="&{false false false false false }" interface=lxc6fff77a2678d k8sPodName=openstack/glance-ks-endpoints-jf94g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ee9a49c4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1169 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-jf94g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ee9a49c4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1169 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=71a820cd-2b68-442a-a2d6-ef37d30d80ce,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=71a820cd-2b68-442a-a2d6-ef37d30d80ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-jf94g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=71a820cd-2b68-442a-a2d6-ef37d30d80ce;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=71a820cd-2b68-442a-a2d6-ef37d30d80ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ee9a49c4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1169 identity=8305 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=71a820cd-2b68-442a-a2d6-ef37d30d80ce,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=71a820cd-2b68-442a-a2d6-ef37d30d80ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-jf94g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ee9a49c4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1169 identity=8305 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-jf94g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ee9a49c4b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1169 identity=8305 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-jf94g subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ee9a49c4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1169 identity=8305 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-jf94g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ee9a49c4b endpointID=1169 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-jf94g subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=71a820cd-2b68-442a-a2d6-ef37d30d80ce k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=71a820cd-2b68-442a-a2d6-ef37d30d80ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1ee9a49c4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1169 identity=8305 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-jf94g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 09976901-49ec-4568-a1fb-c138d4b84f2c default }" containerID=f9283777b7c77cf51f52cbcbe5521cbb4b3c2fbe77c3e75120c27daeead8bef9 datapathConfiguration="&{false false false false false }" interface=lxcd3d47b4e70b8 k8sPodName=openstack/glance-ks-user-5sd77 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9283777b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2033 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-user-5sd77 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9283777b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2033 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1b7a3be8-13f6-49c9-a414-5c9f86b66df2,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=1b7a3be8-13f6-49c9-a414-5c9f86b66df2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-user-5sd77 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1b7a3be8-13f6-49c9-a414-5c9f86b66df2;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=1b7a3be8-13f6-49c9-a414-5c9f86b66df2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9283777b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2033 identity=45243 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1b7a3be8-13f6-49c9-a414-5c9f86b66df2,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=1b7a3be8-13f6-49c9-a414-5c9f86b66df2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-user-5sd77 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9283777b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2033 identity=45243 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-user-5sd77 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9283777b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2033 identity=45243 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-user-5sd77 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9283777b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2033 identity=45243 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-user-5sd77 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f9283777b7 endpointID=2033 k8sNamespace=openstack k8sPodName=glance-ks-user-5sd77 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1b7a3be8-13f6-49c9-a414-5c9f86b66df2 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=1b7a3be8-13f6-49c9-a414-5c9f86b66df2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f9283777b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2033 identity=45243 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-user-5sd77 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 961b60a5-09db-48de-9dfb-67b437f2f15d default }" containerID=78d8cb08f3130ce57ce7653e4442f1f0173ecc1a29e92eec0ab3845e81260724 datapathConfiguration="&{false false false false false }" interface=lxc620d857baa7c k8sPodName=openstack/glance-metadefs-load-4sngv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78d8cb08f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-metadefs-load-4sngv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78d8cb08f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e92b981a-dc99-4414-b824-24b3d49b0c83,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=e92b981a-dc99-4414-b824-24b3d49b0c83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-metadefs-load-4sngv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e92b981a-dc99-4414-b824-24b3d49b0c83;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=e92b981a-dc99-4414-b824-24b3d49b0c83;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=78d8cb08f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 identity=46133 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e92b981a-dc99-4414-b824-24b3d49b0c83,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=e92b981a-dc99-4414-b824-24b3d49b0c83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-metadefs-load-4sngv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78d8cb08f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 identity=46133 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-metadefs-load-4sngv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78d8cb08f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3176 identity=46133 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-metadefs-load-4sngv subsys=endpoint level=info msg="Successful endpoint creation" containerID=78d8cb08f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3176 identity=46133 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-metadefs-load-4sngv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=78d8cb08f3 endpointID=3176 k8sNamespace=openstack k8sPodName=glance-metadefs-load-4sngv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e92b981a-dc99-4414-b824-24b3d49b0c83 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=e92b981a-dc99-4414-b824-24b3d49b0c83 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=78d8cb08f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3176 identity=46133 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-metadefs-load-4sngv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 e51e1852-c763-4243-af42-dab8609814b1 default }" containerID=b94c1dfab5c96e98386651ad34514b76d627ba05b642c883d179097efb6896f8 datapathConfiguration="&{false false false false false }" interface=lxc140e78a8114b k8sPodName=openstack/glance-storage-init-smgpw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b94c1dfab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3066 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-storage-init-smgpw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b94c1dfab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3066 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=34c30c9a-ec2f-4b2b-8abf-ea2078e2f41d,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=34c30c9a-ec2f-4b2b-8abf-ea2078e2f41d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-storage-init-smgpw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=34c30c9a-ec2f-4b2b-8abf-ea2078e2f41d;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=34c30c9a-ec2f-4b2b-8abf-ea2078e2f41d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=b94c1dfab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3066 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-storage-init-smgpw line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b94c1dfab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3066 identity=1424 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=34c30c9a-ec2f-4b2b-8abf-ea2078e2f41d,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=34c30c9a-ec2f-4b2b-8abf-ea2078e2f41d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-storage-init-smgpw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b94c1dfab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3066 identity=1424 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-storage-init-smgpw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b94c1dfab5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3066 identity=1424 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-storage-init-smgpw subsys=endpoint level=info msg="Successful endpoint creation" containerID=b94c1dfab5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3066 identity=1424 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-storage-init-smgpw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b94c1dfab5 endpointID=3066 k8sNamespace=openstack k8sPodName=glance-storage-init-smgpw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=34c30c9a-ec2f-4b2b-8abf-ea2078e2f41d k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=34c30c9a-ec2f-4b2b-8abf-ea2078e2f41d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b94c1dfab5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3066 identity=1424 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-storage-init-smgpw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 6620ab88-9a28-4c4b-91f2-55f6fbf7227f default }" containerID=1825d32ca197246698a7987c8bfa2aa155fd43a189a151ad8d552a674a8e1001 datapathConfiguration="&{false false false false false }" interface=lxcf96bc4c7fdb7 k8sPodName=openstack/glance-api-b8c847775-q74dn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1825d32ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3557 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-b8c847775-q74dn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1825d32ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3557 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-b8c847775-q74dn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1825d32ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3557 identity=16093 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-b8c847775-q74dn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1825d32ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3557 identity=16093 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-b8c847775-q74dn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1825d32ca1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3557 identity=16093 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-b8c847775-q74dn subsys=endpoint level=info msg="Successful endpoint creation" containerID=1825d32ca1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3557 identity=16093 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-b8c847775-q74dn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.194 174d4ca3-000b-4c93-8faa-03a58ff7991c default }" containerID=43eda61f0fcb3dfc63b41b2f81e35229f1f46ce00747e73c8410d4e4fe37e8bf datapathConfiguration="&{false false false false false }" interface=lxcb7c95ce6c16d k8sPodName=openstack/staffeln-conductor-56c9998969-pfvpt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43eda61f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3973 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-conductor-56c9998969-pfvpt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43eda61f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3973 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-conductor-56c9998969-pfvpt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=43eda61f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3973 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-conductor-56c9998969-pfvpt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43eda61f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3973 identity=24049 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-conductor-56c9998969-pfvpt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43eda61f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3973 identity=24049 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-conductor-56c9998969-pfvpt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 bafbb47c-e115-4760-a997-8d5e25652343 default }" containerID=220f4d06eee10e5eec5c5d2684e3d8f08c45569361199c8ac1511e33f5ab06c0 datapathConfiguration="&{false false false false false }" interface=lxcbba558f8f01a k8sPodName=openstack/staffeln-api-864fdbf898-stf7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=220f4d06ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-api-864fdbf898-stf7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=220f4d06ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-api-864fdbf898-stf7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=220f4d06ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identity=35752 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-api-864fdbf898-stf7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=220f4d06ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identity=35752 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-api-864fdbf898-stf7b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 6049dd4c-7b82-42a6-a0a9-2dda628ca9f9 default }" containerID=70283f4e9dc1f7c593c6ab4a10a007cc40e1e3b2e0ae54d189d587bc9ab838dc datapathConfiguration="&{false false false false false }" interface=lxcfe4eadbc18de k8sPodName=openstack/staffeln-db-init-zqvn6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70283f4e9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-init-zqvn6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70283f4e9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9aae075c-a64f-4fa9-86e1-9c9b7c96a5c6,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=9aae075c-a64f-4fa9-86e1-9c9b7c96a5c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-init-zqvn6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=9aae075c-a64f-4fa9-86e1-9c9b7c96a5c6;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=9aae075c-a64f-4fa9-86e1-9c9b7c96a5c6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70283f4e9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 identity=62771 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9aae075c-a64f-4fa9-86e1-9c9b7c96a5c6,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=9aae075c-a64f-4fa9-86e1-9c9b7c96a5c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-init-zqvn6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70283f4e9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 identity=62771 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-init-zqvn6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43eda61f0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3973 identity=24049 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-conductor-56c9998969-pfvpt subsys=endpoint level=info msg="Successful endpoint creation" containerID=43eda61f0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3973 identity=24049 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-conductor-56c9998969-pfvpt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=70283f4e9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3375 identity=62771 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-init-zqvn6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70283f4e9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3375 identity=62771 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-init-zqvn6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=220f4d06ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=499 identity=35752 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-api-864fdbf898-stf7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=220f4d06ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=499 identity=35752 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-api-864fdbf898-stf7b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=70283f4e9d endpointID=3375 k8sNamespace=openstack k8sPodName=staffeln-db-init-zqvn6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=9aae075c-a64f-4fa9-86e1-9c9b7c96a5c6 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=9aae075c-a64f-4fa9-86e1-9c9b7c96a5c6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=70283f4e9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3375 identity=62771 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-init-zqvn6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 40540616-05d9-4897-9de8-a653afe2bc27 default }" containerID=c0678178d15876be473ae324ab1d4b835c19fbe2c77f9823d0b3bc82c9e68ec7 datapathConfiguration="&{false false false false false }" interface=lxc93eb9ff4e096 k8sPodName=openstack/staffeln-db-sync-pp77c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0678178d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3813 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-sync-pp77c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0678178d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3813 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6f5c980e-3b14-4c57-90e3-73fcea27b66a,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=6f5c980e-3b14-4c57-90e3-73fcea27b66a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-sync-pp77c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=6f5c980e-3b14-4c57-90e3-73fcea27b66a;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=6f5c980e-3b14-4c57-90e3-73fcea27b66a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0678178d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3813 identity=30991 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6f5c980e-3b14-4c57-90e3-73fcea27b66a,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=6f5c980e-3b14-4c57-90e3-73fcea27b66a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-sync-pp77c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0678178d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3813 identity=30991 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-sync-pp77c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c0678178d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3813 identity=30991 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-sync-pp77c subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0678178d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3813 identity=30991 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-sync-pp77c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager