level=info msg="Memory available for map entries (0.003% of 67421630464B): 168554076B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="900.632µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="46.641µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="972.583µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="11.77µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=110.981376ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.79µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="27.44µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="98.172µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="85.482µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="105.842µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="477.682µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.32µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.101875ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.993705ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="40.971µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="35.941µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="212.176µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="115.993µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="58.441µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=46.754638ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="125.423µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="10.53µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="9.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.209.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.863705ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="5.51µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.990507ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.04µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.501515ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="20.46µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.53µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.7µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.241µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="35.331µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="17.281µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="82.352µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="323.688µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="13.001µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="214.915µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="773.868µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.096737ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="6.681µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="30.771µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.209 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.209 ipAddr.ipv6="" k8sNodeIP=199.204.45.209 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.209" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.170" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.209" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.209} {CiliumInternalIP 10.0.0.170}] 10.0.0.0/24 [] [] 10.0.0.192 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:37013" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.479553073s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="15.741µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.1µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="39.371µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="15.241µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.455216919s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.160 78b964c9-f971-45d0-b30a-f6204ee0f0f0 default }" containerID=5da325d97083643c83b60737cc90bcca1573e7e56fdc652c1de76078da79f184 datapathConfiguration="&{false false false false false }" interface=lxcb9e12e08f034 k8sPodName=kube-system/coredns-7c96b6546b-kg6zn labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.101 1e879782-7d35-4af5-91b1-02c731bc5acc default }" containerID=a61bd02e4505b7862280aae3a13d20cf346e0eb1798e340abcdf82c4cc455acc datapathConfiguration="&{false false false false false }" interface=lxcce1b77c8dc59 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5k4nx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5da325d970 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kg6zn subsys=endpoint level=info msg="New endpoint" containerID=a61bd02e45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5k4nx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5da325d970 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kg6zn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=a61bd02e45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=9c1c7c28-dd71-4d42-8ffd-5666f95f4acc,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=9c1c7c28-dd71-4d42-8ffd-5666f95f4acc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5k4nx subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5da325d970 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identity=39166 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kg6zn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5da325d970 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identity=39166 ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kg6zn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a61bd02e45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5k4nx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=9c1c7c28-dd71-4d42-8ffd-5666f95f4acc;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=9c1c7c28-dd71-4d42-8ffd-5666f95f4acc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a61bd02e45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identity=45137 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=9c1c7c28-dd71-4d42-8ffd-5666f95f4acc,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=9c1c7c28-dd71-4d42-8ffd-5666f95f4acc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5k4nx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a61bd02e45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identity=45137 ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5k4nx subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=318.167664ms file-path=/var/run/cilium/state/templates/8b14e74a0a8403e168c969d83fce96bd03a0e99127de42297c207cc5ed74dbe1/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=608 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2726 ipv4=10.0.0.192 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2726 identityLabels="reserved:health" ipv4=10.0.0.192 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2726 identity=4 identityLabels="reserved:health" ipv4=10.0.0.192 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.08277096s file-path=/var/run/cilium/state/templates/4710d723fdb193fe00cc714f6f47dea4490177ed686dd0dbe29cb0a607415bb7/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2726 identity=4 ipv4=10.0.0.192 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a61bd02e45 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=346 identity=45137 ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5k4nx subsys=endpoint level=info msg="Successful endpoint creation" containerID=a61bd02e45 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=346 identity=45137 ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5k4nx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5da325d970 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1109 identity=39166 ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kg6zn subsys=endpoint level=info msg="Successful endpoint creation" containerID=5da325d970 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1109 identity=39166 ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kg6zn subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a61bd02e45 endpointID=346 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-5k4nx subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=9c1c7c28-dd71-4d42-8ffd-5666f95f4acc k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=9c1c7c28-dd71-4d42-8ffd-5666f95f4acc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=a61bd02e45 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=346 identity=45137 ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5k4nx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 472cc81a-2f4d-46ee-8f56-a109cafa794c default }" containerID=f06e1eca0ec65189b39f66eb17e1e4aabc7327aa6aafc58ecd4233e772a913de datapathConfiguration="&{false false false false false }" interface=lxcd472771f58b0 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xc2xm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f06e1eca0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xc2xm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f06e1eca0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xc2xm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f06e1eca0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 identity=64062 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xc2xm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f06e1eca0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 identity=64062 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xc2xm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f06e1eca0e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3106 identity=64062 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xc2xm subsys=endpoint level=info msg="Successful endpoint creation" containerID=f06e1eca0e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3106 identity=64062 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xc2xm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=608 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00608 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00608 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00608 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00608:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=608 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 7594493d-e72b-43ea-af71-5d0e5b911ddf default }" containerID=7bc1af84d0fe856031cb05759b1ba19a0f2489af184e2946793b9e29e872203b datapathConfiguration="&{false false false false false }" interface=lxcc7d2c078d5ed k8sPodName=kube-system/coredns-67659f764b-w5vfn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7bc1af84d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2046 ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-w5vfn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7bc1af84d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2046 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-w5vfn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7bc1af84d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2046 identity=39166 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-w5vfn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7bc1af84d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2046 identity=39166 ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-w5vfn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 fa9f9990-cc54-4583-9df2-74729b92aea8 default }" containerID=0c9d4a292ee266176ffdbcee25ad798f82b785e100b4dce1fb62829c01ae8b91 datapathConfiguration="&{false false false false false }" interface=lxcfd2a18dbd465 k8sPodName=kube-system/coredns-67659f764b-wjqsk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c9d4a292e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3884 ipv4=10.0.0.200 ipv6= k8sPodName=kube-system/coredns-67659f764b-wjqsk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c9d4a292e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3884 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.200 ipv6= k8sPodName=kube-system/coredns-67659f764b-wjqsk subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0c9d4a292e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3884 identity=39166 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.200 ipv6= k8sPodName=kube-system/coredns-67659f764b-wjqsk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c9d4a292e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3884 identity=39166 ipv4=10.0.0.200 ipv6= k8sPodName=kube-system/coredns-67659f764b-wjqsk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c9d4a292e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3884 identity=39166 ipv4=10.0.0.200 ipv6= k8sPodName=kube-system/coredns-67659f764b-wjqsk subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c9d4a292e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3884 identity=39166 ipv4=10.0.0.200 ipv6= k8sPodName=kube-system/coredns-67659f764b-wjqsk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7bc1af84d0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2046 identity=39166 ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-w5vfn subsys=endpoint level=info msg="Successful endpoint creation" containerID=7bc1af84d0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2046 identity=39166 ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-w5vfn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.238 81d3e3b8-2c52-4dd6-a39f-40ae0767aeb5 default }" containerID=edb84d38ad5e079a066edee90f511020c18d653684564f0691da548a3630baf1 datapathConfiguration="&{false false false false false }" interface=lxc2c3b18104676 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t5pcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edb84d38ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t5pcs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edb84d38ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t5pcs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=edb84d38ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t5pcs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edb84d38ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identity=17465 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t5pcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edb84d38ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identity=17465 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t5pcs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=edb84d38ad datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1269 identity=17465 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t5pcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=edb84d38ad datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1269 identity=17465 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t5pcs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5da325d970 endpointID=1109 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-kg6zn subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=5da325d970 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1109 identity=39166 ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kg6zn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 e218c77d-0dca-487e-b0a8-a16af606c96b default }" containerID=bd6fc5b125d034ee6891fd7af51c5fa04a4b873c4fd6edc846ce76b23d69326a datapathConfiguration="&{false false false false false }" interface=lxc0c9c90480826 k8sPodName=cert-manager/cert-manager-75c4c745bc-wfp94 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd6fc5b125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wfp94 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd6fc5b125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wfp94 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd6fc5b125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 identity=19195 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wfp94 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd6fc5b125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 identity=19195 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wfp94 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.93 3a819a76-cf0a-445d-8636-00877bf6f814 default }" containerID=20ccb917a759ca4a8e27eadb871fd934ff8bea311052103bae1de79be29ab864 datapathConfiguration="&{false false false false false }" interface=lxccc6483709d2e k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zntth labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.202 809290d6-bad8-4703-a8dc-c7bbcaba4923 default }" containerID=893c27c80888b10f7863b9e302099131e641f8db95728fd22bcef7167748b738 datapathConfiguration="&{false false false false false }" interface=lxc1a62fdd75b71 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m79v2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20ccb917a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zntth subsys=endpoint level=info msg="New endpoint" containerID=893c27c808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m79v2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20ccb917a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zntth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=893c27c808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m79v2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20ccb917a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identity=3508 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zntth oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=20ccb917a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identity=3508 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zntth subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=893c27c808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 identity=38173 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m79v2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=893c27c808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 identity=38173 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m79v2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd6fc5b125 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1418 identity=19195 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wfp94 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd6fc5b125 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1418 identity=19195 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wfp94 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=20ccb917a7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=85 identity=3508 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zntth subsys=endpoint level=info msg="Successful endpoint creation" containerID=20ccb917a7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=85 identity=3508 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zntth subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=893c27c808 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=138 identity=38173 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m79v2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=893c27c808 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=138 identity=38173 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m79v2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.162 b5b3a791-b53a-4682-821c-c2b96afb9a5f default }" containerID=8a80e1fac84703f048176d3af04a58763233dbe9c6e0f13fea7fc18e9966d203 datapathConfiguration="&{false false false false false }" interface=lxc8aa477d8987e k8sPodName=cert-manager/cert-manager-startupapicheck-jmcts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a80e1fac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jmcts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a80e1fac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=511501c6-1fbb-430b-933e-16c4b2deaf24,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=511501c6-1fbb-430b-933e-16c4b2deaf24,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jmcts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=511501c6-1fbb-430b-933e-16c4b2deaf24;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=511501c6-1fbb-430b-933e-16c4b2deaf24;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a80e1fac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identity=61905 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=511501c6-1fbb-430b-933e-16c4b2deaf24,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=511501c6-1fbb-430b-933e-16c4b2deaf24,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jmcts oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a80e1fac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identity=61905 ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jmcts subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a80e1fac8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=543 identity=61905 ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jmcts subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a80e1fac8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=543 identity=61905 ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jmcts subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8a80e1fac8 endpointID=543 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-jmcts subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=511501c6-1fbb-430b-933e-16c4b2deaf24 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=511501c6-1fbb-430b-933e-16c4b2deaf24 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=8a80e1fac8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=543 identity=61905 ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jmcts subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 b33c46ed-2964-4596-8ed5-e1e089b1a091 default }" containerID=8ab1c13ebdb4a2d8905dc236c84b70d3d0739b253d81612b23f9b15a0a5db1df datapathConfiguration="&{false false false false false }" interface=lxca0b8055bb3f2 k8sPodName=ingress-nginx/ingress-nginx-admission-create-lrzxx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ab1c13ebd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=211 ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lrzxx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ab1c13ebd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=211 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ae417e59-f5bb-4ee5-9b14-f14819c0de1f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=ae417e59-f5bb-4ee5-9b14-f14819c0de1f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lrzxx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8ab1c13ebd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=211 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lrzxx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=ae417e59-f5bb-4ee5-9b14-f14819c0de1f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=ae417e59-f5bb-4ee5-9b14-f14819c0de1f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ab1c13ebd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=211 identity=17740 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ae417e59-f5bb-4ee5-9b14-f14819c0de1f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=ae417e59-f5bb-4ee5-9b14-f14819c0de1f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lrzxx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ab1c13ebd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=211 identity=17740 ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lrzxx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ab1c13ebd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=211 identity=17740 ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lrzxx subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ab1c13ebd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=211 identity=17740 ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lrzxx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ab1c13ebd endpointID=211 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-lrzxx subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=ae417e59-f5bb-4ee5-9b14-f14819c0de1f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=ae417e59-f5bb-4ee5-9b14-f14819c0de1f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=8ab1c13ebd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=211 identity=17740 ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lrzxx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 e62b3a25-27cb-4abc-8f09-ecda7db6d74f default }" containerID=6e583f444093c859e5a5f8038f22ca3ed4aa2fd2ae6689a503a725e96595effe datapathConfiguration="&{false false false false false }" interface=lxc8c393b2f0226 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v2c6n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e583f4440 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 ipv4=10.0.0.247 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v2c6n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e583f4440 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.247 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v2c6n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6e583f4440 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.247 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v2c6n line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e583f4440 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=28943 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.247 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v2c6n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e583f4440 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=28943 ipv4=10.0.0.247 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v2c6n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e583f4440 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=31 identity=28943 ipv4=10.0.0.247 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v2c6n subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e583f4440 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=31 identity=28943 ipv4=10.0.0.247 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v2c6n subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.11 1117f549-b2b5-4995-ad5f-f7ef917335b0 default }" containerID=d0a9c97ca2a5b72a3c73f783dcd12f287fdda18a201dd8659b5dffbc8f88e699 datapathConfiguration="&{false false false false false }" interface=lxc63bde1d3ba16 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tnskq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0a9c97ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tnskq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0a9c97ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2ec810fe-6465-48cf-ac24-d927de53ac0d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2ec810fe-6465-48cf-ac24-d927de53ac0d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tnskq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=2ec810fe-6465-48cf-ac24-d927de53ac0d;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=2ec810fe-6465-48cf-ac24-d927de53ac0d;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0a9c97ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identity=458 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2ec810fe-6465-48cf-ac24-d927de53ac0d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2ec810fe-6465-48cf-ac24-d927de53ac0d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tnskq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0a9c97ca2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identity=458 ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tnskq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0a9c97ca2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=25 identity=458 ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tnskq subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0a9c97ca2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=25 identity=458 ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tnskq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d0a9c97ca2 endpointID=25 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-tnskq subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=2ec810fe-6465-48cf-ac24-d927de53ac0d k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=2ec810fe-6465-48cf-ac24-d927de53ac0d k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=d0a9c97ca2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=25 identity=458 ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tnskq subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ccc72008-586a-40c1-81f5-df04c79de62a] Description:}]" policyAddRequest=61f1279f-23f0-4591-b7e9-cc7e294a2701 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=61f1279f-23f0-4591-b7e9-cc7e294a2701 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=034d7df5-8c2b-4c54-9c07-4eb4da6c4ad8] Description:}]" policyAddRequest=f9b2c257-8dfb-4c2a-b6b4-6584aec33755 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f9b2c257-8dfb-4c2a-b6b4-6584aec33755 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.133 4ea3492f-1b8f-4ce1-b68c-24a68b919633 default }" containerID=31f9ed47c8a5409bed4dc0ae31cdccfedaf113261b3805a52608e16b922bffd7 datapathConfiguration="&{false false false false false }" interface=lxcdae18f6d871d k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h9qcl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31f9ed47c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h9qcl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31f9ed47c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h9qcl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=31f9ed47c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h9qcl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31f9ed47c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=6707 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h9qcl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31f9ed47c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=6707 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h9qcl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31f9ed47c8 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=108 identity=6707 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h9qcl subsys=endpoint level=info msg="Successful endpoint creation" containerID=31f9ed47c8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=108 identity=6707 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h9qcl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.114 cc3f6ed9-7028-43af-a8bf-15d71bcb29e4 default }" containerID=f7f9205701b39a5a5cf26958c1a24d8368ad1d72ffdfd1c486eefb27eea3069a datapathConfiguration="&{false false false false false }" interface=lxc90ab6ec707b6 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c8ttg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7f9205701 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1413 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c8ttg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7f9205701 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1413 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c8ttg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7f9205701 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1413 identity=22934 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c8ttg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7f9205701 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1413 identity=22934 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c8ttg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7f9205701 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1413 identity=22934 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c8ttg subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7f9205701 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1413 identity=22934 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c8ttg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.94 512588eb-7e6a-418f-ba32-332f8f4d3497 default }" containerID=640fade5024c44de83657c3a56fdf8b430abed1b070d918d4bb13b2b4fc9b34d datapathConfiguration="&{false false false false false }" interface=lxc393c0129d18c k8sPodName=openstack/pxc-operator-69cb5bbdb9-mqclr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=640fade502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mqclr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=640fade502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mqclr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=640fade502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identity=4684 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mqclr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=640fade502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identity=4684 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mqclr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=640fade502 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1361 identity=4684 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mqclr subsys=endpoint level=info msg="Successful endpoint creation" containerID=640fade502 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1361 identity=4684 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mqclr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.123 55f0c7ca-d103-486b-9ac5-6903b46d667d default }" containerID=19e4a0e710ecdfc10b215b6d66e05a03631c6010654499957b928b72abefd6fa datapathConfiguration="&{false false false false false }" interface=lxc0431781425aa k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19e4a0e710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19e4a0e710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19e4a0e710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=42329 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19e4a0e710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=42329 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=19e4a0e710 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=688 identity=42329 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19e4a0e710 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=688 identity=42329 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.57 614089f5-3f5c-4d64-9bcb-1b63651e010e default }" containerID=5cf7b07436d6774b98aa76ced5675a7b22c5c747fff7ca1a8399c28c2198a29a datapathConfiguration="&{false false false false false }" interface=lxc9bfb1e7b25bd k8sPodName=local-path-storage/helper-pod-create-pvc-428cf0f8-8ac6-40ce-a788-9e32db51ff25 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5cf7b07436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-428cf0f8-8ac6-40ce-a788-9e32db51ff25 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5cf7b07436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-428cf0f8-8ac6-40ce-a788-9e32db51ff25 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5cf7b07436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identity=13512 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-428cf0f8-8ac6-40ce-a788-9e32db51ff25 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cf7b07436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identity=13512 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-428cf0f8-8ac6-40ce-a788-9e32db51ff25 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5cf7b07436 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3417 identity=13512 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-428cf0f8-8ac6-40ce-a788-9e32db51ff25 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cf7b07436 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3417 identity=13512 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-428cf0f8-8ac6-40ce-a788-9e32db51ff25 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5cf7b07436 endpointID=3417 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-428cf0f8-8ac6-40ce-a788-9e32db51ff25 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5cf7b07436 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3417 identity=13512 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-428cf0f8-8ac6-40ce-a788-9e32db51ff25 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 285fad8b-629f-4a8e-b3be-0060dfc485c6 default }" containerID=482dfbe8fe096cd07dbbb397b7442eea7bdea5029bc30acad407ba9161c8ec9b datapathConfiguration="&{false false false false false }" interface=lxc77cce2bac13a k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=482dfbe8fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=482dfbe8fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=482dfbe8fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 identity=37873 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=482dfbe8fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 identity=37873 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=482dfbe8fe datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1420 identity=37873 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=482dfbe8fe datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1420 identity=37873 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=be3bd89d-0bd3-488e-90d2-89ecd9a859cd] Description:}]" policyAddRequest=2df0826b-4d48-49bf-a3eb-3675da70c5da subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=2df0826b-4d48-49bf-a3eb-3675da70c5da policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.186 bb38f285-b876-4650-8f87-eb614f1e2e82 default }" containerID=ea8b60cd93346fed70ba24f5a06db5b0d2169a51de018b414808cb1bf259e68d datapathConfiguration="&{false false false false false }" interface=lxc5555b9e48124 k8sPodName=local-path-storage/helper-pod-create-pvc-20f41fb0-4087-4320-a0a0-98f4455ec94c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea8b60cd93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-20f41fb0-4087-4320-a0a0-98f4455ec94c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea8b60cd93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-20f41fb0-4087-4320-a0a0-98f4455ec94c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea8b60cd93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identity=13512 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-20f41fb0-4087-4320-a0a0-98f4455ec94c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea8b60cd93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identity=13512 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-20f41fb0-4087-4320-a0a0-98f4455ec94c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea8b60cd93 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1839 identity=13512 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-20f41fb0-4087-4320-a0a0-98f4455ec94c subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea8b60cd93 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1839 identity=13512 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-20f41fb0-4087-4320-a0a0-98f4455ec94c subsys=daemon level=info msg="Delete endpoint request" containerID=ea8b60cd93 endpointID=1839 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-20f41fb0-4087-4320-a0a0-98f4455ec94c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ea8b60cd93 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1839 identity=13512 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-20f41fb0-4087-4320-a0a0-98f4455ec94c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 88e9e210-7be9-4ddf-bf2f-93365758d8db default }" containerID=8454693350141f6e406338143e70d30e496c7c618b108c2f1105fb8d2a095ea3 datapathConfiguration="&{false false false false false }" interface=lxcc8b5d6739a76 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8454693350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8454693350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8454693350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 identity=3177 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8454693350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 identity=3177 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8454693350 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2884 identity=3177 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8454693350 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2884 identity=3177 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=0117e8b0-b4f9-4813-a535-600cf908f6a9] Description:}]" policyAddRequest=ac5d5eaf-9244-4735-bd33-25d259aad10c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ac5d5eaf-9244-4735-bd33-25d259aad10c policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.28 195566b9-4d7c-4167-9cb4-c229979e8604 default }" containerID=b5870104e8e9b436bcd126481d3e7747cef22cdbd18e97ad565e2762b15f64b1 datapathConfiguration="&{false false false false false }" interface=lxce42841c97985 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5870104e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 ipv4=10.0.0.28 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5870104e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.28 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5870104e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identity=27688 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.28 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b5870104e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identity=27688 ipv4=10.0.0.28 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5870104e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=937 identity=27688 ipv4=10.0.0.28 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5870104e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=937 identity=27688 ipv4=10.0.0.28 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009593923735576989 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.71 a32c9453-db44-4754-858a-4c579c7125bd default }" containerID=96e22def73546e483e1e96372b4a4fb689a6d649c41882a2019853a21625aee8 datapathConfiguration="&{false false false false false }" interface=lxc9f88699168b4 k8sPodName=monitoring/node-feature-discovery-worker-5cfth labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96e22def73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5cfth subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96e22def73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5cfth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=96e22def73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5cfth line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96e22def73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 identity=64555 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5cfth oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96e22def73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 identity=64555 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5cfth subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 d3547a21-ed8a-433c-8cfe-43dd70afe736 default }" containerID=0e8b2c391c1e3a7695531ef53a11bee33b13a1b9ef934b7d3229716fc78b1e03 datapathConfiguration="&{false false false false false }" interface=lxc63f65aa4be86 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7txsd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e8b2c391c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7txsd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e8b2c391c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7txsd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 4ceaeb9c-cbf7-4f60-b131-33634424105b default }" containerID=d839741136ebea237fe460594ddf84d8fa308822643166dfe8852bcb76e9113e datapathConfiguration="&{false false false false false }" interface=lxc2a7bbcd2efe9 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lmhth labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=d839741136 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lmhth subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d839741136 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lmhth subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=0e8b2c391c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 identity=41388 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7txsd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e8b2c391c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 identity=41388 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7txsd subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d839741136 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 identity=4989 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lmhth oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d839741136 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 identity=4989 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lmhth subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96e22def73 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=828 identity=64555 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5cfth subsys=endpoint level=info msg="Successful endpoint creation" containerID=96e22def73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=828 identity=64555 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5cfth subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0e8b2c391c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2785 identity=41388 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7txsd subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e8b2c391c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2785 identity=41388 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7txsd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d839741136 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=145 identity=4989 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lmhth subsys=endpoint level=info msg="Successful endpoint creation" containerID=d839741136 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=145 identity=4989 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lmhth subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 2aad36d4-314c-43dc-a363-c90202221777 default }" containerID=d959221e697230af85e0047f2519ab8a8b2f4ad278dc20997ef91ec06cf2defd datapathConfiguration="&{false false false false false }" interface=lxcb31c553d209e k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vg2p5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d959221e69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2739 ipv4=10.0.0.140 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vg2p5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d959221e69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2739 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.140 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vg2p5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d959221e69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2739 identity=49978 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.140 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vg2p5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d959221e69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2739 identity=49978 ipv4=10.0.0.140 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vg2p5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d959221e69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2739 identity=49978 ipv4=10.0.0.140 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vg2p5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d959221e69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2739 identity=49978 ipv4=10.0.0.140 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vg2p5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=608 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00608 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00608 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00608 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00608:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=608 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 40d2d594-2e80-4619-ae51-b593c9cbf26f default }" containerID=13c0bc38d09a5bea82f03723cbe749efedb707924d9adc4491c358d92aa632c4 datapathConfiguration="&{false false false false false }" interface=lxc61c3d1909c1d k8sPodName=monitoring/kube-prometheus-stack-admission-create-j4x4r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13c0bc38d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-j4x4r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13c0bc38d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=44ade88a-e3c2-4a17-8903-18ba4d08b207,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=44ade88a-e3c2-4a17-8903-18ba4d08b207,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-j4x4r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=44ade88a-e3c2-4a17-8903-18ba4d08b207;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=44ade88a-e3c2-4a17-8903-18ba4d08b207;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13c0bc38d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 identity=1530 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=44ade88a-e3c2-4a17-8903-18ba4d08b207,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=44ade88a-e3c2-4a17-8903-18ba4d08b207,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-j4x4r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=13c0bc38d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 identity=1530 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-j4x4r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13c0bc38d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1326 identity=1530 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-j4x4r subsys=endpoint level=info msg="Successful endpoint creation" containerID=13c0bc38d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1326 identity=1530 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-j4x4r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=13c0bc38d0 endpointID=1326 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-j4x4r subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=44ade88a-e3c2-4a17-8903-18ba4d08b207 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=44ade88a-e3c2-4a17-8903-18ba4d08b207 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=13c0bc38d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1326 identity=1530 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-j4x4r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 41ea4383-4002-4256-a7eb-5b030c9a66cb default }" containerID=737af9e862fd65e334ff20067ba567e914e05ecb06108e3d11fc448aed066ded datapathConfiguration="&{false false false false false }" interface=lxcc229c2ef17e2 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5vv6h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=737af9e862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5vv6h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=737af9e862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5vv6h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=737af9e862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5vv6h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=737af9e862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 identity=29112 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5vv6h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=737af9e862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 identity=29112 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5vv6h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=737af9e862 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2401 identity=29112 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5vv6h subsys=endpoint level=info msg="Successful endpoint creation" containerID=737af9e862 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2401 identity=29112 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5vv6h subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.231 f13926b6-32e7-4b2a-b903-4b43096fb85e default }" containerID=3dc30c16b71fd757bbc193e730256f0b5114169119cbf803c8a82fc785f7d60b datapathConfiguration="&{false false false false false }" interface=lxcdb71839bb3ab k8sPodName=monitoring/kube-prometheus-stack-grafana-8bd554868-gwsmb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3dc30c16b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8bd554868-gwsmb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3dc30c16b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8bd554868-gwsmb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3dc30c16b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identity=6014 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8bd554868-gwsmb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3dc30c16b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identity=6014 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8bd554868-gwsmb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 4dcfb64a-c6c2-4d1c-bc46-aad1d477a983 default }" containerID=d261ce827d8bba086ed18e932aa64e2170b7f992ddaedeadf725afc155ed8c00 datapathConfiguration="&{false false false false false }" interface=lxca61382ddce5e k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-c6hdg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d261ce827d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-c6hdg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d261ce827d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-c6hdg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d261ce827d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=2141 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-c6hdg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d261ce827d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=2141 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-c6hdg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3dc30c16b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=825 identity=6014 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8bd554868-gwsmb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3dc30c16b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=825 identity=6014 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8bd554868-gwsmb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d261ce827d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=620 identity=2141 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-c6hdg subsys=endpoint level=info msg="Successful endpoint creation" containerID=d261ce827d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=620 identity=2141 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-c6hdg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.236 bdbea479-59a2-4fa8-ac3d-d66e5330208a default }" containerID=2a5c5e8c8ac830fea84d88e335f0c6fa91e710f9496fcc236fda2f8284eb346d datapathConfiguration="&{false false false false false }" interface=lxc75d6a70653d9 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bd4wr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a5c5e8c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bd4wr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a5c5e8c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=f0a9d1f4-19ec-42fa-9516-6033f2fd59dc,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=f0a9d1f4-19ec-42fa-9516-6033f2fd59dc,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bd4wr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=f0a9d1f4-19ec-42fa-9516-6033f2fd59dc;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=f0a9d1f4-19ec-42fa-9516-6033f2fd59dc;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a5c5e8c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identity=7984 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=f0a9d1f4-19ec-42fa-9516-6033f2fd59dc,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=f0a9d1f4-19ec-42fa-9516-6033f2fd59dc,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bd4wr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a5c5e8c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identity=7984 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bd4wr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a5c5e8c8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=252 identity=7984 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bd4wr subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a5c5e8c8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=252 identity=7984 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bd4wr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 c6ef1160-41a0-463e-98ba-ba3851f62dab default }" containerID=a0cf4cfd5106bfb02f336f962da49f73a1a610316db3e4c3b53d7a28d5e8b54f datapathConfiguration="&{false false false false false }" interface=lxce67a0b74eb97 k8sPodName=local-path-storage/helper-pod-create-pvc-2cbd13ce-6150-4354-99f0-988cf8063dc1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0cf4cfd51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2cbd13ce-6150-4354-99f0-988cf8063dc1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0cf4cfd51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2cbd13ce-6150-4354-99f0-988cf8063dc1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0cf4cfd51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 identity=13512 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2cbd13ce-6150-4354-99f0-988cf8063dc1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0cf4cfd51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 identity=13512 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2cbd13ce-6150-4354-99f0-988cf8063dc1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a0cf4cfd51 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1615 identity=13512 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2cbd13ce-6150-4354-99f0-988cf8063dc1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0cf4cfd51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1615 identity=13512 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2cbd13ce-6150-4354-99f0-988cf8063dc1 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.125 cd2a4157-19c7-409a-8a3f-1e61f8c312ac default }" containerID=f09db36709f6f10f8c03bf870ccf9d296a60cad5b2114bdb8277d5dbd9b53301 datapathConfiguration="&{false false false false false }" interface=lxcdf650a687ea9 k8sPodName=local-path-storage/helper-pod-create-pvc-f4a0cad5-9cf0-40de-b569-9ba77b4d45a1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f09db36709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1831 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f4a0cad5-9cf0-40de-b569-9ba77b4d45a1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f09db36709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1831 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f4a0cad5-9cf0-40de-b569-9ba77b4d45a1 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f09db36709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1831 identity=13512 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f4a0cad5-9cf0-40de-b569-9ba77b4d45a1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f09db36709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1831 identity=13512 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f4a0cad5-9cf0-40de-b569-9ba77b4d45a1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f09db36709 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1831 identity=13512 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f4a0cad5-9cf0-40de-b569-9ba77b4d45a1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f09db36709 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1831 identity=13512 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f4a0cad5-9cf0-40de-b569-9ba77b4d45a1 subsys=daemon level=info msg="Delete endpoint request" containerID=2a5c5e8c8a endpointID=252 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-bd4wr subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=f0a9d1f4-19ec-42fa-9516-6033f2fd59dc k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=f0a9d1f4-19ec-42fa-9516-6033f2fd59dc k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=2a5c5e8c8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=252 identity=7984 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bd4wr subsys=endpoint level=info msg="Delete endpoint request" containerID=a0cf4cfd51 endpointID=1615 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2cbd13ce-6150-4354-99f0-988cf8063dc1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a0cf4cfd51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1615 identity=13512 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2cbd13ce-6150-4354-99f0-988cf8063dc1 subsys=endpoint level=info msg="Delete endpoint request" containerID=f09db36709 endpointID=1831 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f4a0cad5-9cf0-40de-b569-9ba77b4d45a1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f09db36709 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1831 identity=13512 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f4a0cad5-9cf0-40de-b569-9ba77b4d45a1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 73f58fa8-1daf-45e4-97e9-62d25deb4316 default }" containerID=45cbb4c7e2af50fb5f96cd8c0427c88cfb5b5baa1b5738144f657336596b6693 datapathConfiguration="&{false false false false false }" interface=lxc74d982d1e980 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45cbb4c7e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45cbb4c7e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=45cbb4c7e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45cbb4c7e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=50973 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45cbb4c7e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=50973 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 99db18b9-3b27-4081-88dc-620dc3b7110a default }" containerID=02b0b8aae8d54c0b78d6a79fcbcdaa6c62ea6354e67971bf5d2005c30609ce6c datapathConfiguration="&{false false false false false }" interface=lxc6df9d5c19c10 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02b0b8aae8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3869 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02b0b8aae8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3869 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02b0b8aae8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3869 identity=42204 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02b0b8aae8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3869 identity=42204 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45cbb4c7e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=27 identity=50973 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45cbb4c7e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=27 identity=50973 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=02b0b8aae8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3869 identity=42204 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=02b0b8aae8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3869 identity=42204 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 05d20796-91d8-4727-916b-f0521cae56c1 default }" containerID=7a30b0074d79143c4ba758e732b7b48eee298afbb0e38f17096db73df5a55bb2 datapathConfiguration="&{false false false false false }" interface=lxcfd8eb6a52032 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a30b0074d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3049 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 6032abf5-c747-4c81-8d9c-e2c8c23107ed default }" containerID=9cb214582526b46d8307177c03bb13f1e541d2080d9de72b0868093b5d2297dc datapathConfiguration="&{false false false false false }" interface=lxc68e3b28dd160 k8sPodName=monitoring/loki-gateway-cf54cb88c-7cmgw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9cb2145825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3339 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7cmgw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a30b0074d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3049 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=9cb2145825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3339 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7cmgw subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=7a30b0074d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3049 identity=4169 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a30b0074d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3049 identity=4169 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9cb2145825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3339 identity=54352 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7cmgw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9cb2145825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3339 identity=54352 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7cmgw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a30b0074d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3049 identity=4169 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a30b0074d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3049 identity=4169 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9cb2145825 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3339 identity=54352 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7cmgw subsys=endpoint level=info msg="Successful endpoint creation" containerID=9cb2145825 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3339 identity=54352 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7cmgw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.175 edcedad7-42b9-464c-8a48-f713b10212a1 default }" containerID=b75beff59da6a71664d800d4c634f78cee6b5423b558264646d1fce7664568d5 datapathConfiguration="&{false false false false false }" interface=lxcb66120a942d3 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.4 310e2d3d-543c-474f-bb41-daeb14d7ee28 default }" containerID=351c1f567902625bd98f75de992581431973e0378fb085872ee6061189a21bb8 datapathConfiguration="&{false false false false false }" interface=lxcfa237d38d20e k8sPodName=local-path-storage/helper-pod-create-pvc-a1d192ae-3463-4fda-9092-4508db4e6f69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b75beff59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3502 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=351c1f5679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1d192ae-3463-4fda-9092-4508db4e6f69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=351c1f5679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1d192ae-3463-4fda-9092-4508db4e6f69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b75beff59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3502 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=351c1f5679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identity=13512 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1d192ae-3463-4fda-9092-4508db4e6f69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=351c1f5679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identity=13512 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1d192ae-3463-4fda-9092-4508db4e6f69 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b75beff59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3502 identity=2536 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b75beff59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3502 identity=2536 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=351c1f5679 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2403 identity=13512 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1d192ae-3463-4fda-9092-4508db4e6f69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=351c1f5679 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2403 identity=13512 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1d192ae-3463-4fda-9092-4508db4e6f69 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b75beff59d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3502 identity=2536 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b75beff59d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3502 identity=2536 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.92 eee729ae-4f49-4411-b104-03f884af9165 default }" containerID=c67dc6b47165a4565b914bf18315e8ddf1d4f830f9f9bdcac0f80d1fbbe049c0 datapathConfiguration="&{false false false false false }" interface=lxcd95278f2b4d0 k8sPodName=monitoring/vector-qscnw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c67dc6b471 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-qscnw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c67dc6b471 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-qscnw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c67dc6b471 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identity=9937 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-qscnw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c67dc6b471 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identity=9937 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-qscnw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c67dc6b471 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=582 identity=9937 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-qscnw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c67dc6b471 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=582 identity=9937 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-qscnw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=351c1f5679 endpointID=2403 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a1d192ae-3463-4fda-9092-4508db4e6f69 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=351c1f5679 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2403 identity=13512 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1d192ae-3463-4fda-9092-4508db4e6f69 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.49 e3045cc9-7779-4abb-b279-8c961dcc98c1 default }" containerID=2dee2504d1a1fa3aed56631796852bf4d43d03bbab0451856a574323e8641b4b datapathConfiguration="&{false false false false false }" interface=lxc722093d078ea k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dee2504d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dee2504d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2dee2504d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identity=25318 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2dee2504d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identity=25318 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2dee2504d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3449 identity=25318 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dee2504d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3449 identity=25318 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.181 620c14d1-af3d-40db-898c-0c17e9cd36ae default }" containerID=d7a3b1f086ef32f049c256767afc1f2563f169009288e4d0179f3cbb606553de datapathConfiguration="&{false false false false false }" interface=lxc31e511de529d k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8rb49 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7a3b1f086 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8rb49 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7a3b1f086 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8rb49 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7a3b1f086 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identity=19872 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8rb49 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7a3b1f086 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identity=19872 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8rb49 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7a3b1f086 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=777 identity=19872 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8rb49 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7a3b1f086 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=777 identity=19872 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8rb49 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.137 866f60f2-0bb6-4d66-b937-07ef8f3d7bd1 default }" containerID=3647c3f44b8b4cc900b7c4ce62166f63ff40aca4382c8aca34df6297df8ea242 datapathConfiguration="&{false false false false false }" interface=lxc4174f3367b59 k8sPodName=openstack/memcached-memcached-6479589586-5qj9j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3647c3f44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1211 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5qj9j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3647c3f44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1211 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5qj9j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3647c3f44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1211 identity=21960 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5qj9j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3647c3f44b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1211 identity=21960 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5qj9j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3647c3f44b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1211 identity=21960 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5qj9j subsys=endpoint level=info msg="Successful endpoint creation" containerID=3647c3f44b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1211 identity=21960 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5qj9j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.195 11173cb0-1423-4a51-ba1b-05f28e2f4e9f default }" containerID=e179f3a6384a1dd630cbde310a36a8861aa16fb6e16a292e0a5456d83bba4bd4 datapathConfiguration="&{false false false false false }" interface=lxc68426284a220 k8sPodName=local-path-storage/helper-pod-create-pvc-1e89a47c-e5ab-4fa8-9ac7-ed52b61fd1a4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e179f3a638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e89a47c-e5ab-4fa8-9ac7-ed52b61fd1a4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e179f3a638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e89a47c-e5ab-4fa8-9ac7-ed52b61fd1a4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e179f3a638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identity=13512 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e89a47c-e5ab-4fa8-9ac7-ed52b61fd1a4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e179f3a638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identity=13512 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e89a47c-e5ab-4fa8-9ac7-ed52b61fd1a4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e179f3a638 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1451 identity=13512 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e89a47c-e5ab-4fa8-9ac7-ed52b61fd1a4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e179f3a638 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1451 identity=13512 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e89a47c-e5ab-4fa8-9ac7-ed52b61fd1a4 subsys=daemon level=info msg="Delete endpoint request" containerID=e179f3a638 endpointID=1451 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1e89a47c-e5ab-4fa8-9ac7-ed52b61fd1a4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e179f3a638 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1451 identity=13512 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e89a47c-e5ab-4fa8-9ac7-ed52b61fd1a4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 1b0ee61a-d5d4-4022-86d7-42bb87e28558 default }" containerID=3615bf9797f872f7ad2bcd742512042d20eb8adc55e355e5858baf28a60799a1 datapathConfiguration="&{false false false false false }" interface=lxc6556833890f3 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3615bf9797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3615bf9797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3615bf9797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3615bf9797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=12168 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3615bf9797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=12168 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3615bf9797 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4 identity=12168 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3615bf9797 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4 identity=12168 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.186 1d549674-4f43-4205-90b0-417fe6da261e default }" containerID=52888d32d23011ace99244d7a1e843fada8d4e785e1cf1d5f00ac8a97bcf8b2f datapathConfiguration="&{false false false false false }" interface=lxc4addb99cd39e k8sPodName=openstack/keystone-api-59656dcf69-7tqf8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52888d32d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-api-59656dcf69-7tqf8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52888d32d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-api-59656dcf69-7tqf8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52888d32d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 identity=28788 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-api-59656dcf69-7tqf8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52888d32d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 identity=28788 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-api-59656dcf69-7tqf8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52888d32d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3318 identity=28788 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-api-59656dcf69-7tqf8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=52888d32d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3318 identity=28788 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-api-59656dcf69-7tqf8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.235 0ca22c6f-fb53-45fc-bae2-bba4c723c2ac default }" containerID=0e55e7b699e7d0836f441f2c1bda22ce381de1cdfef0336fa3ba9c8f6649bac6 datapathConfiguration="&{false false false false false }" interface=lxc965edc9a8c1c k8sPodName=openstack/keystone-credential-setup-fg2fn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e55e7b699 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1112 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-credential-setup-fg2fn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e55e7b699 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1112 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6f59e19e-be2b-44ff-8f80-07b4b7d1da49,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6f59e19e-be2b-44ff-8f80-07b4b7d1da49,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-credential-setup-fg2fn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6f59e19e-be2b-44ff-8f80-07b4b7d1da49;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=6f59e19e-be2b-44ff-8f80-07b4b7d1da49;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e55e7b699 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1112 identity=17023 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6f59e19e-be2b-44ff-8f80-07b4b7d1da49,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6f59e19e-be2b-44ff-8f80-07b4b7d1da49,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-credential-setup-fg2fn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e55e7b699 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1112 identity=17023 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-credential-setup-fg2fn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e55e7b699 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1112 identity=17023 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-credential-setup-fg2fn subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e55e7b699 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1112 identity=17023 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-credential-setup-fg2fn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0e55e7b699 endpointID=1112 k8sNamespace=openstack k8sPodName=keystone-credential-setup-fg2fn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6f59e19e-be2b-44ff-8f80-07b4b7d1da49 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=6f59e19e-be2b-44ff-8f80-07b4b7d1da49 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0e55e7b699 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1112 identity=17023 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-credential-setup-fg2fn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 b9afd3cf-0fcb-4ec3-b37b-aff61f5b5a16 default }" containerID=1a8833a3671ffeb8ba631d8d94aeab99ed0698ec4403df301192217933ea8494 datapathConfiguration="&{false false false false false }" interface=lxc0881c208f3eb k8sPodName=openstack/keystone-db-init-9pp88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a8833a367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-db-init-9pp88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a8833a367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=72b6dc6d-9999-4d6f-9154-6d773a7adfb0,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=72b6dc6d-9999-4d6f-9154-6d773a7adfb0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-db-init-9pp88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=72b6dc6d-9999-4d6f-9154-6d773a7adfb0;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=72b6dc6d-9999-4d6f-9154-6d773a7adfb0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a8833a367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identity=61944 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=72b6dc6d-9999-4d6f-9154-6d773a7adfb0,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=72b6dc6d-9999-4d6f-9154-6d773a7adfb0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-db-init-9pp88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a8833a367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identity=61944 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-db-init-9pp88 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1a8833a367 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1039 identity=61944 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-db-init-9pp88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a8833a367 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1039 identity=61944 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-db-init-9pp88 subsys=daemon level=info msg="Delete endpoint request" containerID=1a8833a367 endpointID=1039 k8sNamespace=openstack k8sPodName=keystone-db-init-9pp88 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=72b6dc6d-9999-4d6f-9154-6d773a7adfb0 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=72b6dc6d-9999-4d6f-9154-6d773a7adfb0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1a8833a367 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1039 identity=61944 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-db-init-9pp88 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 62251982-d7e0-4ca1-b851-7c278e82bfbf default }" containerID=b4b2f193c114b00bd916abcc5f4ff704f8183e86303f9757d4325e219bb56731 datapathConfiguration="&{false false false false false }" interface=lxccb855e30a684 k8sPodName=openstack/keystone-fernet-setup-5298f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4b2f193c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-fernet-setup-5298f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4b2f193c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e7021f7d-066a-45b5-93a5-30df87688e09,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=e7021f7d-066a-45b5-93a5-30df87688e09,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-fernet-setup-5298f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b4b2f193c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-fernet-setup-5298f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e7021f7d-066a-45b5-93a5-30df87688e09;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=e7021f7d-066a-45b5-93a5-30df87688e09;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4b2f193c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identity=14565 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e7021f7d-066a-45b5-93a5-30df87688e09,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=e7021f7d-066a-45b5-93a5-30df87688e09,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-fernet-setup-5298f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4b2f193c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identity=14565 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-fernet-setup-5298f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4b2f193c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=302 identity=14565 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-fernet-setup-5298f subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4b2f193c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=302 identity=14565 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-fernet-setup-5298f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4b2f193c1 endpointID=302 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-5298f subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e7021f7d-066a-45b5-93a5-30df87688e09 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=e7021f7d-066a-45b5-93a5-30df87688e09 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b4b2f193c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=302 identity=14565 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-fernet-setup-5298f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 a270edc3-8dcb-49d8-969e-0618a4572573 default }" containerID=1687d023c042a93717a9caab5a6a04fb37a70c8bf65ac7c0b0c532484c99d78f datapathConfiguration="&{false false false false false }" interface=lxc302bc51f3938 k8sPodName=openstack/keystone-db-sync-q5m2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1687d023c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3604 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-db-sync-q5m2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1687d023c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3604 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0557a95d-0259-45a1-85c2-862a7461d2fd,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0557a95d-0259-45a1-85c2-862a7461d2fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-db-sync-q5m2b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1687d023c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3604 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-db-sync-q5m2b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0557a95d-0259-45a1-85c2-862a7461d2fd;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=0557a95d-0259-45a1-85c2-862a7461d2fd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1687d023c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3604 identity=363 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0557a95d-0259-45a1-85c2-862a7461d2fd,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0557a95d-0259-45a1-85c2-862a7461d2fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-db-sync-q5m2b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1687d023c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3604 identity=363 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-db-sync-q5m2b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1687d023c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3604 identity=363 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-db-sync-q5m2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=1687d023c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3604 identity=363 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-db-sync-q5m2b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1687d023c0 endpointID=3604 k8sNamespace=openstack k8sPodName=keystone-db-sync-q5m2b subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0557a95d-0259-45a1-85c2-862a7461d2fd k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=0557a95d-0259-45a1-85c2-862a7461d2fd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1687d023c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3604 identity=363 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-db-sync-q5m2b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 85c32e21-8fb0-44c7-a1b6-bf9e3609d979 default }" containerID=5e387db4efaab9717e8e26c49a91bb37b542b8d781d76862d0812fb94ac0beef datapathConfiguration="&{false false false false false }" interface=lxc7283ff994a5f k8sPodName=openstack/keystone-rabbit-init-8d6mz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e387db4ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-rabbit-init-8d6mz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e387db4ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cb1dad7a-cec3-4a68-abfc-bb7cd5355190,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=cb1dad7a-cec3-4a68-abfc-bb7cd5355190,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-rabbit-init-8d6mz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=cb1dad7a-cec3-4a68-abfc-bb7cd5355190;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=cb1dad7a-cec3-4a68-abfc-bb7cd5355190;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=5e387db4ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-rabbit-init-8d6mz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5e387db4ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 identity=3661 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cb1dad7a-cec3-4a68-abfc-bb7cd5355190,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=cb1dad7a-cec3-4a68-abfc-bb7cd5355190,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-rabbit-init-8d6mz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e387db4ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 identity=3661 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-rabbit-init-8d6mz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e387db4ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3107 identity=3661 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-rabbit-init-8d6mz subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e387db4ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3107 identity=3661 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-rabbit-init-8d6mz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5e387db4ef endpointID=3107 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-8d6mz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=cb1dad7a-cec3-4a68-abfc-bb7cd5355190 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=cb1dad7a-cec3-4a68-abfc-bb7cd5355190 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5e387db4ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3107 identity=3661 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-rabbit-init-8d6mz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 fdda8555-ee62-4a97-8c1c-5e58f9b6f109 default }" containerID=631ed6a3f6a2592e468c00bde3d25b6263ed1c15dbab1943ab52e187d526b465 datapathConfiguration="&{false false false false false }" interface=lxc3eea470b2078 k8sPodName=openstack/keystone-domain-manage-wxssb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=631ed6a3f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-domain-manage-wxssb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=631ed6a3f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5a6d1e9a-aca0-4f6d-a14b-98e7edf2a4e1,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=5a6d1e9a-aca0-4f6d-a14b-98e7edf2a4e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-domain-manage-wxssb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5a6d1e9a-aca0-4f6d-a14b-98e7edf2a4e1;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=5a6d1e9a-aca0-4f6d-a14b-98e7edf2a4e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=631ed6a3f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identity=45474 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5a6d1e9a-aca0-4f6d-a14b-98e7edf2a4e1,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=5a6d1e9a-aca0-4f6d-a14b-98e7edf2a4e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-domain-manage-wxssb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=631ed6a3f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identity=45474 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-domain-manage-wxssb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=631ed6a3f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=381 identity=45474 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-domain-manage-wxssb subsys=endpoint level=info msg="Successful endpoint creation" containerID=631ed6a3f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=381 identity=45474 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-domain-manage-wxssb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=631ed6a3f6 endpointID=381 k8sNamespace=openstack k8sPodName=keystone-domain-manage-wxssb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5a6d1e9a-aca0-4f6d-a14b-98e7edf2a4e1 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=5a6d1e9a-aca0-4f6d-a14b-98e7edf2a4e1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=631ed6a3f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=381 identity=45474 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-domain-manage-wxssb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 c5993313-9aaa-4c05-922f-3f330dd4d7e4 default }" containerID=32d8378959aec26d2ebeaf4a384d4c8935a2fe8cba16361cd4eac93e8ff28432 datapathConfiguration="&{false false false false false }" interface=lxc6bd7db25015d k8sPodName=openstack/keystone-bootstrap-7r7bs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32d8378959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-bootstrap-7r7bs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32d8378959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=750ff66b-d2c3-4a00-8d5c-0ce59ced683c,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=750ff66b-d2c3-4a00-8d5c-0ce59ced683c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-bootstrap-7r7bs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=750ff66b-d2c3-4a00-8d5c-0ce59ced683c;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=750ff66b-d2c3-4a00-8d5c-0ce59ced683c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32d8378959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 identity=444 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=750ff66b-d2c3-4a00-8d5c-0ce59ced683c,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=750ff66b-d2c3-4a00-8d5c-0ce59ced683c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-bootstrap-7r7bs oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=32d8378959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 identity=444 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-bootstrap-7r7bs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=32d8378959 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2899 identity=444 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-bootstrap-7r7bs subsys=endpoint level=info msg="Successful endpoint creation" containerID=32d8378959 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2899 identity=444 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-bootstrap-7r7bs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=32d8378959 endpointID=2899 k8sNamespace=openstack k8sPodName=keystone-bootstrap-7r7bs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=750ff66b-d2c3-4a00-8d5c-0ce59ced683c k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=750ff66b-d2c3-4a00-8d5c-0ce59ced683c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=32d8378959 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2899 identity=444 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-bootstrap-7r7bs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 8b2fe3f1-b3c5-4caa-9c88-905f79d65f4e default }" containerID=882097a88b504a640ba77b03b61b374df9b634c8dba587d3c1802a1249f6a494 datapathConfiguration="&{false false false false false }" interface=lxc8aeece06f38e k8sPodName=local-path-storage/helper-pod-create-pvc-e1346d0c-1786-45a4-9b80-8c99c9384a94 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=882097a88b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3938 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1346d0c-1786-45a4-9b80-8c99c9384a94 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=882097a88b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3938 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1346d0c-1786-45a4-9b80-8c99c9384a94 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=882097a88b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3938 identity=13512 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1346d0c-1786-45a4-9b80-8c99c9384a94 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=882097a88b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3938 identity=13512 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1346d0c-1786-45a4-9b80-8c99c9384a94 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=882097a88b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3938 identity=13512 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1346d0c-1786-45a4-9b80-8c99c9384a94 subsys=endpoint level=info msg="Successful endpoint creation" containerID=882097a88b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3938 identity=13512 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1346d0c-1786-45a4-9b80-8c99c9384a94 subsys=daemon level=info msg="Delete endpoint request" containerID=882097a88b endpointID=3938 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e1346d0c-1786-45a4-9b80-8c99c9384a94 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=882097a88b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3938 identity=13512 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1346d0c-1786-45a4-9b80-8c99c9384a94 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 f85abaec-a54d-4ea2-a7d1-3ed9c348bfb7 default }" containerID=b11f8e9b3b76b2462fdab15a7aa60fb217c8f571d84cb8b5720ebad881dd87c9 datapathConfiguration="&{false false false false false }" interface=lxcf3c7390b1e9b k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b11f8e9b3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b11f8e9b3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b11f8e9b3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b11f8e9b3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 identity=33555 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b11f8e9b3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2984 identity=33555 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b11f8e9b3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2984 identity=33555 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b11f8e9b3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2984 identity=33555 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.101 6a697b76-96fa-4728-b738-013c1e2c1aa2 default }" containerID=55d2ca693448f415b0b7330181c393ba0ce4060d9622faab351e56aca8466d6a datapathConfiguration="&{false false false false false }" interface=lxc2f157e877cbc k8sPodName=openstack/barbican-api-8459d86b56-r8xnj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55d2ca6934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-api-8459d86b56-r8xnj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55d2ca6934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-api-8459d86b56-r8xnj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55d2ca6934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identity=22867 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-api-8459d86b56-r8xnj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55d2ca6934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identity=22867 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-api-8459d86b56-r8xnj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.66 8fa2d63d-523c-469a-909e-73d6bd2d56a3 default }" containerID=c51b3edeed9975f230c4d3bd860dcd4907a9b00bbc0514b40797b7d04514579a datapathConfiguration="&{false false false false false }" interface=lxcb60763092207 k8sPodName=openstack/barbican-db-init-v84fp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c51b3edeed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2735 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-init-v84fp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c51b3edeed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2735 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bf71ed5d-3d85-449a-8be9-81161a119524,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=bf71ed5d-3d85-449a-8be9-81161a119524,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-init-v84fp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bf71ed5d-3d85-449a-8be9-81161a119524;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=bf71ed5d-3d85-449a-8be9-81161a119524;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c51b3edeed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2735 identity=33097 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bf71ed5d-3d85-449a-8be9-81161a119524,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=bf71ed5d-3d85-449a-8be9-81161a119524,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-init-v84fp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c51b3edeed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2735 identity=33097 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-init-v84fp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55d2ca6934 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1691 identity=22867 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-api-8459d86b56-r8xnj subsys=endpoint level=info msg="Successful endpoint creation" containerID=55d2ca6934 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1691 identity=22867 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-api-8459d86b56-r8xnj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c51b3edeed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2735 identity=33097 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-init-v84fp subsys=endpoint level=info msg="Successful endpoint creation" containerID=c51b3edeed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2735 identity=33097 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-init-v84fp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c51b3edeed endpointID=2735 k8sNamespace=openstack k8sPodName=barbican-db-init-v84fp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bf71ed5d-3d85-449a-8be9-81161a119524 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=bf71ed5d-3d85-449a-8be9-81161a119524 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c51b3edeed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2735 identity=33097 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-init-v84fp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 c7726dd4-50e6-4f29-9ac6-7ead469ad6c2 default }" containerID=7ad8abdbad3b378886237f8569e04fe02825c780bda47043f335fadd205dadcd datapathConfiguration="&{false false false false false }" interface=lxc84119dcc5cb3 k8sPodName=openstack/barbican-db-sync-9f9gz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ad8abdbad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-db-sync-9f9gz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ad8abdbad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7b3a6fe3-686c-4180-90ed-f10fff5efc33,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=7b3a6fe3-686c-4180-90ed-f10fff5efc33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-db-sync-9f9gz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7ad8abdbad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-db-sync-9f9gz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7b3a6fe3-686c-4180-90ed-f10fff5efc33;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=7b3a6fe3-686c-4180-90ed-f10fff5efc33;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ad8abdbad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 identity=31705 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7b3a6fe3-686c-4180-90ed-f10fff5efc33,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=7b3a6fe3-686c-4180-90ed-f10fff5efc33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-db-sync-9f9gz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ad8abdbad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 identity=31705 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-db-sync-9f9gz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ad8abdbad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1596 identity=31705 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-db-sync-9f9gz subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ad8abdbad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1596 identity=31705 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-db-sync-9f9gz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03596115086504254 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=7ad8abdbad endpointID=1596 k8sNamespace=openstack k8sPodName=barbican-db-sync-9f9gz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7b3a6fe3-686c-4180-90ed-f10fff5efc33 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=7b3a6fe3-686c-4180-90ed-f10fff5efc33 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7ad8abdbad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1596 identity=31705 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-db-sync-9f9gz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 ee258411-3777-43b7-932d-83a9d1a62639 default }" containerID=a3a37da3d8efc21e678881e9fbd4348985dba4d90afcc2ccc3be772a1ea01e4a datapathConfiguration="&{false false false false false }" interface=lxce8ec60fafbc9 k8sPodName=openstack/barbican-rabbit-init-hwphz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3a37da3d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-rabbit-init-hwphz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3a37da3d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=56e27520-fb0f-4b45-9d0b-a5e8402d8efc,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=56e27520-fb0f-4b45-9d0b-a5e8402d8efc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-rabbit-init-hwphz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a3a37da3d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-rabbit-init-hwphz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=56e27520-fb0f-4b45-9d0b-a5e8402d8efc;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=56e27520-fb0f-4b45-9d0b-a5e8402d8efc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3a37da3d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 identity=4025 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=56e27520-fb0f-4b45-9d0b-a5e8402d8efc,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=56e27520-fb0f-4b45-9d0b-a5e8402d8efc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-rabbit-init-hwphz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3a37da3d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 identity=4025 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-rabbit-init-hwphz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a3a37da3d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1840 identity=4025 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-rabbit-init-hwphz subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3a37da3d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1840 identity=4025 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-rabbit-init-hwphz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a3a37da3d8 endpointID=1840 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-hwphz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=56e27520-fb0f-4b45-9d0b-a5e8402d8efc k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=56e27520-fb0f-4b45-9d0b-a5e8402d8efc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a3a37da3d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1840 identity=4025 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-rabbit-init-hwphz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 a33835dc-e6b7-40fa-bf64-00ec53f78148 default }" containerID=ad6ddb4a152709446346f959f8a0285e9dc420f3f1455a1791bf1aeb358d39c7 datapathConfiguration="&{false false false false false }" interface=lxc123f827815fe k8sPodName=openstack/barbican-ks-service-gcfx6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad6ddb4a15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-service-gcfx6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad6ddb4a15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dae462fe-61d4-45db-8682-7ae3cc12ffee,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=dae462fe-61d4-45db-8682-7ae3cc12ffee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-service-gcfx6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ad6ddb4a15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-service-gcfx6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=dae462fe-61d4-45db-8682-7ae3cc12ffee;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=dae462fe-61d4-45db-8682-7ae3cc12ffee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad6ddb4a15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identity=5669 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dae462fe-61d4-45db-8682-7ae3cc12ffee,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=dae462fe-61d4-45db-8682-7ae3cc12ffee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-service-gcfx6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad6ddb4a15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1289 identity=5669 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-service-gcfx6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad6ddb4a15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1289 identity=5669 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-service-gcfx6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad6ddb4a15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1289 identity=5669 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-service-gcfx6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ad6ddb4a15 endpointID=1289 k8sNamespace=openstack k8sPodName=barbican-ks-service-gcfx6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=dae462fe-61d4-45db-8682-7ae3cc12ffee k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=dae462fe-61d4-45db-8682-7ae3cc12ffee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ad6ddb4a15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1289 identity=5669 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-service-gcfx6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 0b66d3a5-c1ae-47a6-97ca-c46bbd73557b default }" containerID=afb1a6a69e740c48101e3ce4b4cf507118b1864e1e5536b623679acaf3f596cf datapathConfiguration="&{false false false false false }" interface=lxc843d7e421830 k8sPodName=openstack/barbican-ks-endpoints-9hf2q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afb1a6a69e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9hf2q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afb1a6a69e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b94f19a4-1c46-4abd-8c45-afd72330b422,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b94f19a4-1c46-4abd-8c45-afd72330b422,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9hf2q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b94f19a4-1c46-4abd-8c45-afd72330b422;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b94f19a4-1c46-4abd-8c45-afd72330b422;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=afb1a6a69e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identity=29236 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b94f19a4-1c46-4abd-8c45-afd72330b422,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b94f19a4-1c46-4abd-8c45-afd72330b422,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9hf2q oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=afb1a6a69e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identity=29236 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9hf2q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=afb1a6a69e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1284 identity=29236 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9hf2q subsys=endpoint level=info msg="Successful endpoint creation" containerID=afb1a6a69e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1284 identity=29236 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9hf2q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=afb1a6a69e endpointID=1284 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-9hf2q subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b94f19a4-1c46-4abd-8c45-afd72330b422 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b94f19a4-1c46-4abd-8c45-afd72330b422 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=afb1a6a69e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1284 identity=29236 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9hf2q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 e0c6c961-1e9a-4cf3-9c09-c678535e5499 default }" containerID=99e59607141755cbc52d5f10ff6313f2c5d789a94864ba5712790e1ffd46ff44 datapathConfiguration="&{false false false false false }" interface=lxc7624b913db1c k8sPodName=openstack/barbican-ks-user-99nxw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99e5960714 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-user-99nxw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99e5960714 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f8f80cb5-1a52-432f-bf67-464c12ffe520,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=f8f80cb5-1a52-432f-bf67-464c12ffe520,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-user-99nxw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f8f80cb5-1a52-432f-bf67-464c12ffe520;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=f8f80cb5-1a52-432f-bf67-464c12ffe520;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99e5960714 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=15987 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f8f80cb5-1a52-432f-bf67-464c12ffe520,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=f8f80cb5-1a52-432f-bf67-464c12ffe520,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-user-99nxw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99e5960714 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=15987 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-user-99nxw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=99e5960714 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=267 identity=15987 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-user-99nxw subsys=endpoint level=info msg="Successful endpoint creation" containerID=99e5960714 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=267 identity=15987 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-user-99nxw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=99e5960714 endpointID=267 k8sNamespace=openstack k8sPodName=barbican-ks-user-99nxw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f8f80cb5-1a52-432f-bf67-464c12ffe520 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=f8f80cb5-1a52-432f-bf67-464c12ffe520 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=99e5960714 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=267 identity=15987 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-user-99nxw subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.253 b9e4c078-d722-45a9-bbc0-606f896635ec default }" containerID=cc944ac4cc6ae3d4fe463d11612502b460c217e9c7b52b968bc35e62c22e37cb datapathConfiguration="&{false false false false false }" interface=lxc23dd852bd04e k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-m7wsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc944ac4cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 ipv4=10.0.0.253 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-m7wsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc944ac4cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.253 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-m7wsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=cc944ac4cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=37092 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.253 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-m7wsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc944ac4cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=37092 ipv4=10.0.0.253 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-m7wsz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc944ac4cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=263 identity=37092 ipv4=10.0.0.253 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-m7wsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc944ac4cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=263 identity=37092 ipv4=10.0.0.253 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-m7wsz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.26 ff709a9f-ed9a-4a66-a89a-a3c6c9d139ed default }" containerID=dc9818ad7ea1612d3a48b38f6be707739e005a6c66d288399b1385c81201bc7f datapathConfiguration="&{false false false false false }" interface=lxc436eeef298a7 k8sPodName=openstack/rook-ceph-detect-version-pm94z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc9818ad7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3933 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pm94z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc9818ad7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3933 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=2b47c70a-6b6a-4ada-a98b-463e65781322,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=2b47c70a-6b6a-4ada-a98b-463e65781322,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pm94z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=2b47c70a-6b6a-4ada-a98b-463e65781322;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=2b47c70a-6b6a-4ada-a98b-463e65781322;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc9818ad7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3933 identity=34906 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=2b47c70a-6b6a-4ada-a98b-463e65781322,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=2b47c70a-6b6a-4ada-a98b-463e65781322,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pm94z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc9818ad7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3933 identity=34906 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pm94z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dc9818ad7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3933 identity=34906 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pm94z subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc9818ad7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3933 identity=34906 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pm94z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dc9818ad7e endpointID=3933 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-pm94z subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=2b47c70a-6b6a-4ada-a98b-463e65781322 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=2b47c70a-6b6a-4ada-a98b-463e65781322 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=dc9818ad7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3933 identity=34906 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pm94z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 e801dff5-abef-4df6-b6b4-c3765cd453a4 default }" containerID=ea770dda3def948eca07cbe8f3b7f16a0c9c13cd2414b5e56a7aabb5ad8b7358 datapathConfiguration="&{false false false false false }" interface=lxc167b2d89013f k8sPodName=openstack/ceph-object-controller-detect-version-ttmm9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea770dda3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ttmm9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea770dda3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=82613d0f-c75a-458c-8974-8528bd902689,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=82613d0f-c75a-458c-8974-8528bd902689,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ttmm9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=82613d0f-c75a-458c-8974-8528bd902689;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=82613d0f-c75a-458c-8974-8528bd902689;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ea770dda3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identity=50083 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=82613d0f-c75a-458c-8974-8528bd902689,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=82613d0f-c75a-458c-8974-8528bd902689,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ttmm9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea770dda3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identity=50083 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ttmm9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea770dda3d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=278 identity=50083 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ttmm9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea770dda3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=278 identity=50083 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ttmm9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ea770dda3d endpointID=278 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-ttmm9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=82613d0f-c75a-458c-8974-8528bd902689 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=82613d0f-c75a-458c-8974-8528bd902689 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=ea770dda3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=278 identity=50083 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ttmm9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 31c03d16-d02f-4bea-a6cf-eebecfb8b271 default }" containerID=62660415251c607d5095f0128153d31153bf6f1a374941d85dc47b893e6cc931 datapathConfiguration="&{false false false false false }" interface=lxc436ba9d716ab k8sPodName=local-path-storage/helper-pod-create-pvc-83190a5f-f35b-401e-8c7a-e7bdbe819e5a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6266041525 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83190a5f-f35b-401e-8c7a-e7bdbe819e5a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6266041525 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83190a5f-f35b-401e-8c7a-e7bdbe819e5a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6266041525 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 identity=13512 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83190a5f-f35b-401e-8c7a-e7bdbe819e5a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6266041525 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 identity=13512 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83190a5f-f35b-401e-8c7a-e7bdbe819e5a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6266041525 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=425 identity=13512 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83190a5f-f35b-401e-8c7a-e7bdbe819e5a subsys=endpoint level=info msg="Successful endpoint creation" containerID=6266041525 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=425 identity=13512 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83190a5f-f35b-401e-8c7a-e7bdbe819e5a subsys=daemon level=info msg="Delete endpoint request" containerID=6266041525 endpointID=425 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-83190a5f-f35b-401e-8c7a-e7bdbe819e5a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6266041525 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=425 identity=13512 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83190a5f-f35b-401e-8c7a-e7bdbe819e5a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 2ae31ae8-5adb-4508-b2c1-248046eedf76 default }" containerID=8bf4a382b901f52d0daffbfa94584f24d0ce3e02ad4ab996b296ff1201357d2d datapathConfiguration="&{false false false false false }" interface=lxc8d9b8d9f032b k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bf4a382b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1305 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bf4a382b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1305 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bf4a382b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1305 identity=1119 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bf4a382b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1305 identity=1119 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8bf4a382b9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1305 identity=1119 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bf4a382b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1305 identity=1119 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.194 d35f3ffe-4892-443c-8925-114ff2edbc21 default }" containerID=8217db30069943fcb3f313bfba1ac02f7205e87a1a76b74350683b7681345893 datapathConfiguration="&{false false false false false }" interface=lxc00f58cc5d097 k8sPodName=openstack/glance-db-init-jqftg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8217db3006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-init-jqftg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8217db3006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5b2b71b7-2536-4bf5-a34f-93df835bb763,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=5b2b71b7-2536-4bf5-a34f-93df835bb763,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-init-jqftg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5b2b71b7-2536-4bf5-a34f-93df835bb763;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=5b2b71b7-2536-4bf5-a34f-93df835bb763;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8217db3006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-init-jqftg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8217db3006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 identity=65154 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5b2b71b7-2536-4bf5-a34f-93df835bb763,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=5b2b71b7-2536-4bf5-a34f-93df835bb763,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-init-jqftg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8217db3006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 identity=65154 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-init-jqftg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8217db3006 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1035 identity=65154 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-init-jqftg subsys=endpoint level=info msg="Successful endpoint creation" containerID=8217db3006 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1035 identity=65154 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-init-jqftg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8217db3006 endpointID=1035 k8sNamespace=openstack k8sPodName=glance-db-init-jqftg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5b2b71b7-2536-4bf5-a34f-93df835bb763 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=5b2b71b7-2536-4bf5-a34f-93df835bb763 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8217db3006 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1035 identity=65154 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-init-jqftg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 a6eae144-4848-4c3b-a397-f3b592448a19 default }" containerID=dbc0d765569ab63b267bc7d0bac3bdc274f35561c0673310d5dc02051ac38cbd datapathConfiguration="&{false false false false false }" interface=lxcf08bb1ad8bca k8sPodName=openstack/glance-db-sync-5pwvf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbc0d76556 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3667 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-sync-5pwvf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbc0d76556 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3667 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=67a07a0e-0939-4186-86ed-859eb6182a44,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=67a07a0e-0939-4186-86ed-859eb6182a44,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-sync-5pwvf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=67a07a0e-0939-4186-86ed-859eb6182a44;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=67a07a0e-0939-4186-86ed-859eb6182a44;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbc0d76556 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3667 identity=15545 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=67a07a0e-0939-4186-86ed-859eb6182a44,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=67a07a0e-0939-4186-86ed-859eb6182a44,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-sync-5pwvf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbc0d76556 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3667 identity=15545 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-sync-5pwvf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dbc0d76556 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3667 identity=15545 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-sync-5pwvf subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbc0d76556 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3667 identity=15545 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-sync-5pwvf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.21 791c798e-e9bf-4a92-8b7b-5d2849306166 default }" containerID=f2a50bc23c86713daa802b36b5f1cd8e98e0fce8eaaabf13de70bc45b13ff3bf datapathConfiguration="&{false false false false false }" interface=lxcb559992acbc1 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p5ttd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2a50bc23c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p5ttd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2a50bc23c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p5ttd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2a50bc23c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 identity=13551 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p5ttd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2a50bc23c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 identity=13551 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p5ttd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.95 08916b4b-0c9b-4943-909a-3ec79b0a1a77 default }" containerID=cf905463c73434fb9cb740c941d5a90cbdac48e6b67c0ac4ca210294b2a67afb datapathConfiguration="&{false false false false false }" interface=lxc48aaf4ee8935 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qgtw8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf905463c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qgtw8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf905463c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qgtw8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf905463c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 identity=31465 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qgtw8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf905463c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3338 identity=31465 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qgtw8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2a50bc23c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1120 identity=13551 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p5ttd subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2a50bc23c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1120 identity=13551 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p5ttd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cf905463c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3338 identity=31465 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qgtw8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf905463c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3338 identity=31465 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qgtw8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dbc0d76556 endpointID=3667 k8sNamespace=openstack k8sPodName=glance-db-sync-5pwvf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=67a07a0e-0939-4186-86ed-859eb6182a44 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=67a07a0e-0939-4186-86ed-859eb6182a44 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=dbc0d76556 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3667 identity=15545 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-sync-5pwvf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 eabbb107-db95-4c29-a84d-2f219b707d6c default }" containerID=dfc5cc5a3580b6a565cd18b0c1de9ffb2f190b86dea50e38768f28867cec23b6 datapathConfiguration="&{false false false false false }" interface=lxc03a16820f7c4 k8sPodName=openstack/glance-rabbit-init-r4krh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfc5cc5a35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2568 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-rabbit-init-r4krh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfc5cc5a35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2568 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=35e9af38-8787-494c-a9c0-a077adbcf016,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=35e9af38-8787-494c-a9c0-a077adbcf016,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-rabbit-init-r4krh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=35e9af38-8787-494c-a9c0-a077adbcf016;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=35e9af38-8787-494c-a9c0-a077adbcf016;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dfc5cc5a35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2568 identity=37542 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=35e9af38-8787-494c-a9c0-a077adbcf016,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=35e9af38-8787-494c-a9c0-a077adbcf016,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-rabbit-init-r4krh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dfc5cc5a35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2568 identity=37542 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-rabbit-init-r4krh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dfc5cc5a35 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2568 identity=37542 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-rabbit-init-r4krh subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfc5cc5a35 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2568 identity=37542 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-rabbit-init-r4krh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dfc5cc5a35 endpointID=2568 k8sNamespace=openstack k8sPodName=glance-rabbit-init-r4krh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=35e9af38-8787-494c-a9c0-a077adbcf016 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=35e9af38-8787-494c-a9c0-a077adbcf016 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=dfc5cc5a35 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2568 identity=37542 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-rabbit-init-r4krh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 8eee5a64-7aa9-4f85-9058-8f60addc6157 default }" containerID=d00de475a22e30db398ac5ce69433c6fa2d5fa0106aef94c058f8dc9d59a3229 datapathConfiguration="&{false false false false false }" interface=lxc56a9699439a2 k8sPodName=openstack/glance-ks-service-r9qvr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d00de475a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2549 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-service-r9qvr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d00de475a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2549 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=856374c8-ae88-4313-b34f-f6a1e803a573,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=856374c8-ae88-4313-b34f-f6a1e803a573,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-service-r9qvr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=856374c8-ae88-4313-b34f-f6a1e803a573;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=856374c8-ae88-4313-b34f-f6a1e803a573;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d00de475a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2549 identity=35028 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=856374c8-ae88-4313-b34f-f6a1e803a573,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=856374c8-ae88-4313-b34f-f6a1e803a573,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-service-r9qvr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d00de475a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2549 identity=35028 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-service-r9qvr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d00de475a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2549 identity=35028 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-service-r9qvr subsys=endpoint level=info msg="Successful endpoint creation" containerID=d00de475a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2549 identity=35028 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-service-r9qvr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d00de475a2 endpointID=2549 k8sNamespace=openstack k8sPodName=glance-ks-service-r9qvr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=856374c8-ae88-4313-b34f-f6a1e803a573 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=856374c8-ae88-4313-b34f-f6a1e803a573 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d00de475a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2549 identity=35028 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-service-r9qvr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 6b9760f5-c533-4077-91c0-44737882b01a default }" containerID=56e58597b933241b1f6641c4fbc36967c25be984cc727512e469e25b99c13785 datapathConfiguration="&{false false false false false }" interface=lxccd900ce823fb k8sPodName=openstack/glance-ks-endpoints-2cl9g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56e58597b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-2cl9g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56e58597b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8ea0d37e-95af-4c9f-a583-1034c2655a55,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8ea0d37e-95af-4c9f-a583-1034c2655a55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-2cl9g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8ea0d37e-95af-4c9f-a583-1034c2655a55;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=8ea0d37e-95af-4c9f-a583-1034c2655a55;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56e58597b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 identity=1077 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8ea0d37e-95af-4c9f-a583-1034c2655a55,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8ea0d37e-95af-4c9f-a583-1034c2655a55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-2cl9g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56e58597b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 identity=1077 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-2cl9g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=56e58597b9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=342 identity=1077 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-2cl9g subsys=endpoint level=info msg="Successful endpoint creation" containerID=56e58597b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=342 identity=1077 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-2cl9g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=56e58597b9 endpointID=342 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-2cl9g subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8ea0d37e-95af-4c9f-a583-1034c2655a55 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=8ea0d37e-95af-4c9f-a583-1034c2655a55 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=56e58597b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=342 identity=1077 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-2cl9g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 cc33ed5e-63db-4664-b85f-20d2fa5b222b default }" containerID=eb81998defea9074e25128872b1da7dd13bf79c9f2d863e5c7b15f462e73bb32 datapathConfiguration="&{false false false false false }" interface=lxcbbed321c7f60 k8sPodName=openstack/glance-ks-user-p2zh4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb81998def datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-user-p2zh4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb81998def datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7233d581-99c3-4d64-9b7a-7050f9e53e16,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=7233d581-99c3-4d64-9b7a-7050f9e53e16,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-user-p2zh4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eb81998def datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-user-p2zh4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7233d581-99c3-4d64-9b7a-7050f9e53e16;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=7233d581-99c3-4d64-9b7a-7050f9e53e16;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb81998def datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 identity=2035 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7233d581-99c3-4d64-9b7a-7050f9e53e16,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=7233d581-99c3-4d64-9b7a-7050f9e53e16,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-user-p2zh4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb81998def datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 identity=2035 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-user-p2zh4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb81998def datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2952 identity=2035 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-user-p2zh4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb81998def datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2952 identity=2035 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-user-p2zh4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eb81998def endpointID=2952 k8sNamespace=openstack k8sPodName=glance-ks-user-p2zh4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7233d581-99c3-4d64-9b7a-7050f9e53e16 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=7233d581-99c3-4d64-9b7a-7050f9e53e16 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=eb81998def datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2952 identity=2035 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-user-p2zh4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 4fc9ac7b-36bc-4fcd-8b91-b577e732990b default }" containerID=c86b49a1ad6286ddcdced911b5b725b5bb9653d6a0741ac4c6876d0cc75b9a05 datapathConfiguration="&{false false false false false }" interface=lxc7ca1e62ca5f1 k8sPodName=openstack/glance-metadefs-load-bcbb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c86b49a1ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-metadefs-load-bcbb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c86b49a1ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a3f31f51-3e5e-485c-b77a-e2e3a95b5393,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a3f31f51-3e5e-485c-b77a-e2e3a95b5393,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-metadefs-load-bcbb9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a3f31f51-3e5e-485c-b77a-e2e3a95b5393;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=a3f31f51-3e5e-485c-b77a-e2e3a95b5393;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c86b49a1ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identity=65072 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a3f31f51-3e5e-485c-b77a-e2e3a95b5393,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a3f31f51-3e5e-485c-b77a-e2e3a95b5393,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-metadefs-load-bcbb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c86b49a1ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identity=65072 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-metadefs-load-bcbb9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c86b49a1ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=833 identity=65072 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-metadefs-load-bcbb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c86b49a1ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=833 identity=65072 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-metadefs-load-bcbb9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c86b49a1ad endpointID=833 k8sNamespace=openstack k8sPodName=glance-metadefs-load-bcbb9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a3f31f51-3e5e-485c-b77a-e2e3a95b5393 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=a3f31f51-3e5e-485c-b77a-e2e3a95b5393 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c86b49a1ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=833 identity=65072 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-metadefs-load-bcbb9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 ad5c643d-9a23-46c4-850c-2705691d7f34 default }" containerID=6afd2ecc00b5d49529b7022ffa73020ba68c88e6d5f1b8f30004d4e424c4f367 datapathConfiguration="&{false false false false false }" interface=lxcf40ed5103b39 k8sPodName=openstack/glance-storage-init-gb6v7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6afd2ecc00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-storage-init-gb6v7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6afd2ecc00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=78b2b159-9cd7-4929-ba33-6139bb5ff9f2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=78b2b159-9cd7-4929-ba33-6139bb5ff9f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-storage-init-gb6v7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=78b2b159-9cd7-4929-ba33-6139bb5ff9f2;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=78b2b159-9cd7-4929-ba33-6139bb5ff9f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6afd2ecc00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 identity=35921 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=78b2b159-9cd7-4929-ba33-6139bb5ff9f2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=78b2b159-9cd7-4929-ba33-6139bb5ff9f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-storage-init-gb6v7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6afd2ecc00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 identity=35921 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-storage-init-gb6v7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6afd2ecc00 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2730 identity=35921 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-storage-init-gb6v7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6afd2ecc00 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2730 identity=35921 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-storage-init-gb6v7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6afd2ecc00 endpointID=2730 k8sNamespace=openstack k8sPodName=glance-storage-init-gb6v7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=78b2b159-9cd7-4929-ba33-6139bb5ff9f2 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=78b2b159-9cd7-4929-ba33-6139bb5ff9f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6afd2ecc00 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2730 identity=35921 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-storage-init-gb6v7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 d21d6584-9040-476d-867a-bc494bb2ab5c default }" containerID=7f2f6ecc626af730969c9b09994b82548a946b788207b51468418b2d90418e7f datapathConfiguration="&{false false false false false }" interface=lxc7c137dbf9a96 k8sPodName=openstack/glance-api-55f84777f6-rfjf5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f2f6ecc62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1417 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-api-55f84777f6-rfjf5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f2f6ecc62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1417 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-api-55f84777f6-rfjf5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f2f6ecc62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1417 identity=37306 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-api-55f84777f6-rfjf5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7f2f6ecc62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1417 identity=37306 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-api-55f84777f6-rfjf5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f2f6ecc62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1417 identity=37306 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-api-55f84777f6-rfjf5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f2f6ecc62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1417 identity=37306 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-api-55f84777f6-rfjf5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.179 3f6c5c7e-60a1-4374-b16a-cf1bc13aa3e5 default }" containerID=c5981596a6022ead4245672e1c7e1fcd17fc8a4a913a4590eacb7b2d03b6796b datapathConfiguration="&{false false false false false }" interface=lxc847a5806027e k8sPodName=openstack/staffeln-api-dbb4bc7dd-8dxbz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5981596a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1088 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-api-dbb4bc7dd-8dxbz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5981596a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1088 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-api-dbb4bc7dd-8dxbz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5981596a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1088 identity=65279 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-api-dbb4bc7dd-8dxbz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c5981596a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1088 identity=65279 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-api-dbb4bc7dd-8dxbz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 dc57b5d2-8005-4a12-b940-a2f3bd5f00be default }" containerID=a85610cced40aca3db1136865e96b659f66e8483621a8467551a489433508232 datapathConfiguration="&{false false false false false }" interface=lxc5d780ccc63b4 k8sPodName=openstack/staffeln-conductor-5bf468f5ff-5sq4w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a85610cced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-5bf468f5ff-5sq4w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a85610cced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-5bf468f5ff-5sq4w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a85610cced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 identity=20466 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-5bf468f5ff-5sq4w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a85610cced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 identity=20466 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-5bf468f5ff-5sq4w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 76d766a5-f502-467d-b05f-d9a5dec97dba default }" containerID=b29a45aed28cc4a81d71f24425a5348d8005fc07352125603fe22779606fa752 datapathConfiguration="&{false false false false false }" interface=lxcc34b4aece0d5 k8sPodName=openstack/staffeln-db-init-dhrpd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b29a45aed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/staffeln-db-init-dhrpd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b29a45aed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=43bdfba7-a0f1-487a-a2ba-a7deca5f49f7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=43bdfba7-a0f1-487a-a2ba-a7deca5f49f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/staffeln-db-init-dhrpd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=43bdfba7-a0f1-487a-a2ba-a7deca5f49f7;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=43bdfba7-a0f1-487a-a2ba-a7deca5f49f7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b29a45aed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identity=37488 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=43bdfba7-a0f1-487a-a2ba-a7deca5f49f7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=43bdfba7-a0f1-487a-a2ba-a7deca5f49f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/staffeln-db-init-dhrpd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b29a45aed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identity=37488 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/staffeln-db-init-dhrpd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5981596a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1088 identity=65279 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-api-dbb4bc7dd-8dxbz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5981596a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1088 identity=65279 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-api-dbb4bc7dd-8dxbz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a85610cced datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=334 identity=20466 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-5bf468f5ff-5sq4w subsys=endpoint level=info msg="Successful endpoint creation" containerID=a85610cced datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=334 identity=20466 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-5bf468f5ff-5sq4w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b29a45aed2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1373 identity=37488 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/staffeln-db-init-dhrpd subsys=endpoint level=info msg="Successful endpoint creation" containerID=b29a45aed2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1373 identity=37488 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/staffeln-db-init-dhrpd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b29a45aed2 endpointID=1373 k8sNamespace=openstack k8sPodName=staffeln-db-init-dhrpd subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=43bdfba7-a0f1-487a-a2ba-a7deca5f49f7 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=43bdfba7-a0f1-487a-a2ba-a7deca5f49f7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=b29a45aed2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1373 identity=37488 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/staffeln-db-init-dhrpd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 35969fe8-74b0-4206-a357-70a902661d32 default }" containerID=5c30ef94c0495047dd57e583d494b1d3487a0092326d0e4398b088fa35a4118f datapathConfiguration="&{false false false false false }" interface=lxcca9df48a8c09 k8sPodName=openstack/staffeln-db-sync-275mv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c30ef94c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-db-sync-275mv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c30ef94c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4c5dfff8-fb84-43fa-a9cb-d59199f51f48,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=4c5dfff8-fb84-43fa-a9cb-d59199f51f48,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-db-sync-275mv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=4c5dfff8-fb84-43fa-a9cb-d59199f51f48;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=4c5dfff8-fb84-43fa-a9cb-d59199f51f48;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c30ef94c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 identity=8208 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4c5dfff8-fb84-43fa-a9cb-d59199f51f48,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=4c5dfff8-fb84-43fa-a9cb-d59199f51f48,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-db-sync-275mv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c30ef94c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 identity=8208 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-db-sync-275mv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c30ef94c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2320 identity=8208 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-db-sync-275mv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c30ef94c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2320 identity=8208 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-db-sync-275mv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager