level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.126521ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="92.772µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.169972ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="13.941µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=94.298693ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="25.961µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="32.331µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="74.272µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="76.122µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="93.912µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="438.472µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.23µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=20.211867ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.168758ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="60.871µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="105.173µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="315.768µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="130.024µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="91.733µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=44.605087ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="102.652µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.05µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="4.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.250.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.200824ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.981µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.974563ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="1.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.862779ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.46µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="27.11µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="14.631µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="47.071µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="204.416µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.481µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="160.024µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="626.297µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.058299ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.42µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="11.49µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.250 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.250 ipAddr.ipv6="" k8sNodeIP=199.204.45.250 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.250" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.245" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.250" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.250} {CiliumInternalIP 10.0.0.245}] 10.0.0.0/24 [] [] 10.0.0.196 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:37695" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.414973656s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="18.741µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.77µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="38.921µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.101µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.457971637s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=287.085914ms file-path=/var/run/cilium/state/templates/4595bc97043d2f1deeeacbe7f0ece317d3c690574bf926ef090a4a645f539044/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=696 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 ipv4=10.0.0.196 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identityLabels="reserved:health" ipv4=10.0.0.196 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identity=4 identityLabels="reserved:health" ipv4=10.0.0.196 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 04359112-30e8-416d-bd71-38c889fd37f7 default }" containerID=832f03125d2536877de18b3a8a4f0495d3d5d1ffc118816f8989490203b05cb9 datapathConfiguration="&{false false false false false }" interface=lxc3a4267237f28 k8sPodName=cert-manager/cert-manager-75c4c745bc-nw4bv labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.39 e156bd71-8bf6-4c85-9316-a0a3e609ceda default }" containerID=d07d902b77f1628d8ff083a594d717bc3cfd6d1416a7b0ba1da05b3f67d1aa16 datapathConfiguration="&{false false false false false }" interface=lxc68c614803161 k8sPodName=kube-system/coredns-67659f764b-m842x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=832f03125d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2284 ipv4=10.0.0.176 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nw4bv subsys=endpoint level=info msg="New endpoint" containerID=d07d902b77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=12 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-67659f764b-m842x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d07d902b77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=12 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-67659f764b-m842x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=832f03125d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2284 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.176 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nw4bv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d07d902b77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=12 identity=18445 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-67659f764b-m842x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d07d902b77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=12 identity=18445 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-67659f764b-m842x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=832f03125d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2284 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nw4bv line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=832f03125d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2284 identity=3350 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.176 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nw4bv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=832f03125d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2284 identity=3350 ipv4=10.0.0.176 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nw4bv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 26f80be4-96a6-4b5f-8243-4314b71e4852 default }" containerID=ad1f5ca1c5a51490ef44dfbb7cc997244afd6590b44afefa8467f14654d6ba0e datapathConfiguration="&{false false false false false }" interface=lxc1e8d08c4a092 k8sPodName=kube-system/coredns-7c96b6546b-4gtfq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad1f5ca1c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-4gtfq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad1f5ca1c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-4gtfq subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ad1f5ca1c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 identity=18445 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-4gtfq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad1f5ca1c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 identity=18445 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-4gtfq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 9669e0a3-9dbd-4d35-be39-d2dbdb5da349 default }" containerID=754a95120082fcbf3bad953cc64b3d1d18bb761b7af1c4e9fa9fa6861b8c9007 datapathConfiguration="&{false false false false false }" interface=lxcd5ee7d57b9fa k8sPodName=kube-system/coredns-67659f764b-f9mmt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=754a951200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 ipv4=10.0.0.198 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9mmt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=754a951200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.198 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9mmt subsys=endpoint level=info msg="Identity of endpoint changed" containerID=754a951200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 identity=18445 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.198 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9mmt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=754a951200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 identity=18445 ipv4=10.0.0.198 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9mmt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 f9d767b1-30a6-45bf-ac76-2a1d708b22fe default }" containerID=9e10d334643457faa60a844df2f3ca34e0cc9a58041f7d135b9d0029d385354d datapathConfiguration="&{false false false false false }" interface=lxc4854310a361c k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qwzd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e10d33464 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qwzd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e10d33464 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qwzd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.137 04f5bc7d-8203-4af1-a9ae-b736a66c73af default }" containerID=efe9ca9877e4a2505b9e2aa00154f543bb6f564b754931bd6707b6987b87cecd datapathConfiguration="&{false false false false false }" interface=lxc43c53134cb0a k8sPodName=local-path-storage/local-path-provisioner-679c578f5-gttfc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efe9ca9877 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-gttfc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efe9ca9877 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-gttfc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 9984c012-9dc2-4bf8-b683-fdca210288bd default }" containerID=d5dd074ba25fe1cab0d3b22795a47fa298202a0cfa452947f93df09ee1a04a4b datapathConfiguration="&{false false false false false }" interface=lxc95ebcd458908 k8sPodName=cert-manager/cert-manager-startupapicheck-t5r88 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.146 1ad6d8ee-de08-4f85-9da1-d59496c135a3 default }" containerID=bdbbf53b5c025e688140b03b31140b246d4d7cad0b4c076307e0d873d55330c0 datapathConfiguration="&{false false false false false }" interface=lxcab78dc99a666 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kwpgl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5dd074ba2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-t5r88 subsys=endpoint level=info msg="New endpoint" containerID=bdbbf53b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kwpgl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5dd074ba2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=25c9b278-c3e5-46cb-adfe-405b5f9ed5f6,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=25c9b278-c3e5-46cb-adfe-405b5f9ed5f6,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-t5r88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bdbbf53b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kwpgl subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e10d33464 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=2437 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qwzd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e10d33464 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=2437 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qwzd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=efe9ca9877 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identity=48508 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-gttfc oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=efe9ca9877 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identity=48508 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-gttfc subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.031492728s file-path=/var/run/cilium/state/templates/9689e345f3bf76fbed8ca2d56ad573b292620f62de2a87fa7b75685b99c61fb5/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=754a951200 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1045 identity=18445 ipv4=10.0.0.198 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9mmt subsys=endpoint level=info msg="Successful endpoint creation" containerID=754a951200 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1045 identity=18445 ipv4=10.0.0.198 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9mmt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d5dd074ba2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-t5r88 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=bdbbf53b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kwpgl line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d07d902b77 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=12 identity=18445 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-67659f764b-m842x subsys=endpoint level=info msg="Successful endpoint creation" containerID=d07d902b77 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=12 identity=18445 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-67659f764b-m842x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=efe9ca9877 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=256 identity=48508 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-gttfc subsys=endpoint level=info msg="Successful endpoint creation" containerID=efe9ca9877 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=256 identity=48508 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-gttfc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1741 identity=4 ipv4=10.0.0.196 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e10d33464 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=958 identity=2437 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qwzd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e10d33464 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=958 identity=2437 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qwzd2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=832f03125d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2284 identity=3350 ipv4=10.0.0.176 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nw4bv subsys=endpoint level=info msg="Successful endpoint creation" containerID=832f03125d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2284 identity=3350 ipv4=10.0.0.176 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nw4bv subsys=daemon level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=25c9b278-c3e5-46cb-adfe-405b5f9ed5f6;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=25c9b278-c3e5-46cb-adfe-405b5f9ed5f6;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5dd074ba2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identity=63660 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=25c9b278-c3e5-46cb-adfe-405b5f9ed5f6,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=25c9b278-c3e5-46cb-adfe-405b5f9ed5f6,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-t5r88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5dd074ba2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identity=63660 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-t5r88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=ad1f5ca1c5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2022 identity=18445 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-4gtfq subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad1f5ca1c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2022 identity=18445 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-4gtfq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d5dd074ba2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=651 identity=63660 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-t5r88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5dd074ba2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=651 identity=63660 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-t5r88 subsys=daemon level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bdbbf53b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 identity=15335 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kwpgl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bdbbf53b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 identity=15335 ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kwpgl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bdbbf53b5c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1532 identity=15335 ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kwpgl subsys=endpoint level=info msg="Successful endpoint creation" containerID=bdbbf53b5c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1532 identity=15335 ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kwpgl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ad1f5ca1c5 endpointID=2022 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-4gtfq subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=ad1f5ca1c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2022 identity=18445 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-4gtfq subsys=endpoint level=info msg="Delete endpoint request" containerID=d5dd074ba2 endpointID=651 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-t5r88 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=25c9b278-c3e5-46cb-adfe-405b5f9ed5f6 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=25c9b278-c3e5-46cb-adfe-405b5f9ed5f6 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=d5dd074ba2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=651 identity=63660 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-t5r88 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 9765203c-c167-450e-acb6-27a99f7fc374 default }" containerID=b82a00bb33a898d2e46793e9ca4a9c3bb752252d7c106b4d15bc9ff05e908678 datapathConfiguration="&{false false false false false }" interface=lxc40351f7b3108 k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpplt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b82a00bb33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpplt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b82a00bb33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=094e3014-9526-47ec-a488-a8db20189d35,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=094e3014-9526-47ec-a488-a8db20189d35,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpplt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b82a00bb33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpplt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=094e3014-9526-47ec-a488-a8db20189d35;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=094e3014-9526-47ec-a488-a8db20189d35;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b82a00bb33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 identity=2397 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=094e3014-9526-47ec-a488-a8db20189d35,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=094e3014-9526-47ec-a488-a8db20189d35,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpplt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b82a00bb33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 identity=2397 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpplt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b82a00bb33 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2730 identity=2397 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpplt subsys=endpoint level=info msg="Successful endpoint creation" containerID=b82a00bb33 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2730 identity=2397 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpplt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b82a00bb33 endpointID=2730 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-lpplt subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=094e3014-9526-47ec-a488-a8db20189d35 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=094e3014-9526-47ec-a488-a8db20189d35 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=b82a00bb33 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2730 identity=2397 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpplt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 691d6f00-ae1a-43fd-a074-4735f1b1b7ad default }" containerID=d103cb5d0c389b5577b9146a6e7150139e681577bb6ec5d9c4c8b6a657f4c864 datapathConfiguration="&{false false false false false }" interface=lxcaeebe13c916c k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2hj8m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d103cb5d0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3351 ipv4=10.0.0.191 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2hj8m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d103cb5d0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3351 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.191 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2hj8m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d103cb5d0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3351 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.191 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2hj8m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d103cb5d0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3351 identity=37428 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.191 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2hj8m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d103cb5d0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3351 identity=37428 ipv4=10.0.0.191 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2hj8m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d103cb5d0c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3351 identity=37428 ipv4=10.0.0.191 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2hj8m subsys=endpoint level=info msg="Successful endpoint creation" containerID=d103cb5d0c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3351 identity=37428 ipv4=10.0.0.191 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2hj8m subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.83 49ed7529-545a-4e53-ae86-60038873ad90 default }" containerID=a1b88e3a5fbc317c9ecb4effe4e8c6d5b41a33d8acf72057e13380f12cf35d51 datapathConfiguration="&{false false false false false }" interface=lxcf39c6d4dae11 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rhjz5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1b88e3a5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rhjz5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1b88e3a5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1d7c40a9-8c59-48f1-a8bb-f1e247b0774f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=1d7c40a9-8c59-48f1-a8bb-f1e247b0774f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rhjz5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=1d7c40a9-8c59-48f1-a8bb-f1e247b0774f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=1d7c40a9-8c59-48f1-a8bb-f1e247b0774f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1b88e3a5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identity=32303 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1d7c40a9-8c59-48f1-a8bb-f1e247b0774f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=1d7c40a9-8c59-48f1-a8bb-f1e247b0774f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rhjz5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1b88e3a5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identity=32303 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rhjz5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1b88e3a5f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1761 identity=32303 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rhjz5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1b88e3a5f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1761 identity=32303 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rhjz5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a1b88e3a5f endpointID=1761 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-rhjz5 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=1d7c40a9-8c59-48f1-a8bb-f1e247b0774f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=1d7c40a9-8c59-48f1-a8bb-f1e247b0774f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=a1b88e3a5f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1761 identity=32303 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rhjz5 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ef74773f-9729-4c3c-ae8d-bfbe3481f211] Description:}]" policyAddRequest=2e46a71f-d47c-4a7c-965b-a751c6fc8cac subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=2e46a71f-d47c-4a7c-965b-a751c6fc8cac policyRevision=2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=38f758a8-8132-4a07-9779-a1dad0335e7b] Description:}]" policyAddRequest=09537613-7091-40dc-91fb-407a479f5a34 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=09537613-7091-40dc-91fb-407a479f5a34 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.134 89eeec1f-8715-4981-a031-d8e9357f7b0a default }" containerID=aa06dd3441468c7d7f9fd138d4fbb8c5ac60f9b1c7dd0cf300ebb45d291eefae datapathConfiguration="&{false false false false false }" interface=lxc8e5a1afcdf43 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lpw7r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa06dd3441 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lpw7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa06dd3441 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lpw7r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa06dd3441 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identity=23762 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lpw7r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa06dd3441 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identity=23762 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lpw7r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aa06dd3441 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1207 identity=23762 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lpw7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa06dd3441 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1207 identity=23762 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lpw7r subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.187 8ed9c48b-c762-4335-900b-b87590b30cdb default }" containerID=ebadfe83fdc50a22067cfe17d970012a071595ef949767fb0cb6b23a44baf003 datapathConfiguration="&{false false false false false }" interface=lxc54e19a24143a k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-drbtl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebadfe83fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-drbtl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebadfe83fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-drbtl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ebadfe83fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identity=24789 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-drbtl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebadfe83fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identity=24789 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-drbtl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ebadfe83fd datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=385 identity=24789 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-drbtl subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebadfe83fd datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=385 identity=24789 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-drbtl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.36 b93db7f1-f49c-4bcb-a32c-136bf50cb4fe default }" containerID=d199ed21f1a832928f0d9a1cc4de2652260e6c94cce4232b762169d9c698c185 datapathConfiguration="&{false false false false false }" interface=lxc9453c66249ca k8sPodName=openstack/pxc-operator-69cb5bbdb9-sbvpc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d199ed21f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sbvpc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d199ed21f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sbvpc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d199ed21f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identity=21726 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sbvpc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d199ed21f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identity=21726 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sbvpc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d199ed21f1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=246 identity=21726 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sbvpc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d199ed21f1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=246 identity=21726 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sbvpc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.52 af91696d-2826-436c-a20a-0e7ad7dbd30a default }" containerID=55f253d896ead711d3246a58e0a51ed1866e2919d56d9dabf72ce75ad3429e3d datapathConfiguration="&{false false false false false }" interface=lxcae0834789bf8 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55f253d896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55f253d896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=55f253d896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55f253d896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identity=46470 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55f253d896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identity=46470 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 066fd136-f37c-430c-85c6-1cc5d1a32182 default }" containerID=08ab2709f62e44245e5abd2351cbce4e0b7b91a7b4c5960b4f2db44511b3c0ff datapathConfiguration="&{false false false false false }" interface=lxc75c730f46431 k8sPodName=local-path-storage/helper-pod-create-pvc-9b9e88fc-4d4f-4664-8956-317b2a0fb7c8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08ab2709f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9b9e88fc-4d4f-4664-8956-317b2a0fb7c8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08ab2709f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9b9e88fc-4d4f-4664-8956-317b2a0fb7c8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08ab2709f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identity=23370 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9b9e88fc-4d4f-4664-8956-317b2a0fb7c8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08ab2709f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identity=23370 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9b9e88fc-4d4f-4664-8956-317b2a0fb7c8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55f253d896 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=229 identity=46470 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=55f253d896 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=229 identity=46470 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=08ab2709f6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1278 identity=23370 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9b9e88fc-4d4f-4664-8956-317b2a0fb7c8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=08ab2709f6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1278 identity=23370 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9b9e88fc-4d4f-4664-8956-317b2a0fb7c8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=08ab2709f6 endpointID=1278 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9b9e88fc-4d4f-4664-8956-317b2a0fb7c8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=08ab2709f6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1278 identity=23370 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9b9e88fc-4d4f-4664-8956-317b2a0fb7c8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 231e9345-4803-46a4-a6ec-542ec0c2414d default }" containerID=6f24ffe4e1820b1a4d6cbeb229aa6e5f6014088ea14866a400c512620c6e135d datapathConfiguration="&{false false false false false }" interface=lxc819998c0aa32 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f24ffe4e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=377 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f24ffe4e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=377 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f24ffe4e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=377 identity=12128 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f24ffe4e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=377 identity=12128 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6f24ffe4e1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=377 identity=12128 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f24ffe4e1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=377 identity=12128 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=88bd7f07-d8ef-47b7-a767-22e960a0c022] Description:}]" policyAddRequest=6ba97577-9c13-4006-ac9d-24f6b2d7a725 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=6ba97577-9c13-4006-ac9d-24f6b2d7a725 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.246 08f5fa99-ba95-4f98-8a67-8ed5d8cd2ae4 default }" containerID=03c99a01e45ddb5d944719883126a770f13c5d9b83c60d83eebfd33b7971f502 datapathConfiguration="&{false false false false false }" interface=lxce95a986cc8f5 k8sPodName=local-path-storage/helper-pod-create-pvc-7fe24978-1c58-40bd-83e1-46ce05127007 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03c99a01e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fe24978-1c58-40bd-83e1-46ce05127007 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03c99a01e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fe24978-1c58-40bd-83e1-46ce05127007 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03c99a01e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identity=23370 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fe24978-1c58-40bd-83e1-46ce05127007 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03c99a01e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identity=23370 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fe24978-1c58-40bd-83e1-46ce05127007 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03c99a01e4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=208 identity=23370 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fe24978-1c58-40bd-83e1-46ce05127007 subsys=endpoint level=info msg="Successful endpoint creation" containerID=03c99a01e4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=208 identity=23370 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fe24978-1c58-40bd-83e1-46ce05127007 subsys=daemon level=info msg="Delete endpoint request" containerID=03c99a01e4 endpointID=208 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7fe24978-1c58-40bd-83e1-46ce05127007 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=03c99a01e4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=208 identity=23370 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fe24978-1c58-40bd-83e1-46ce05127007 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 2731453b-7fcf-4796-8e98-21abf0759c85 default }" containerID=88c82b29dd6a101e4e08e4bba820285875083d9d75183b97d8d7d82ee6cb98c2 datapathConfiguration="&{false false false false false }" interface=lxcdc9c8f6c6cff k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88c82b29dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=428 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88c82b29dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=428 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88c82b29dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=428 identity=1318 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=88c82b29dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=428 identity=1318 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88c82b29dd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=428 identity=1318 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=88c82b29dd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=428 identity=1318 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=6688cb75-c33f-4a61-bb6b-1c50326c637e] Description:}]" policyAddRequest=7d38c6c5-60d6-4e92-86a6-0e75b018d84d subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=7d38c6c5-60d6-4e92-86a6-0e75b018d84d policyRevision=5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.53 3a18d427-1167-42a1-9b6c-a4b24ecf6e4f default }" containerID=c28412ae4b7f1a618e5d1ee4144ea55dc53a808605f37cd2450cd76ec72d97a0 datapathConfiguration="&{false false false false false }" interface=lxc5a2892b36d52 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c28412ae4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 ipv4=10.0.0.53 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c28412ae4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.53 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c28412ae4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=47850 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.53 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c28412ae4b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1119 identity=47850 ipv4=10.0.0.53 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c28412ae4b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1119 identity=47850 ipv4=10.0.0.53 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c28412ae4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1119 identity=47850 ipv4=10.0.0.53 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.01136932379238979 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.65 96028288-a523-4ff4-a548-5fd402b9554c default }" containerID=8884fd5dc4833b497c99c3296e6f130717beb03f7f2833bbffacdfbecd82465a datapathConfiguration="&{false false false false false }" interface=lxcf1099632144c k8sPodName=monitoring/node-feature-discovery-worker-zcjcg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8884fd5dc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1556 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zcjcg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 96d8b5d4-8900-4310-b8ee-463c8c11c47d default }" containerID=97d49490aa5481258b47797f21879d15c2df6f5dbe315730bf12fdd23c3d99b1 datapathConfiguration="&{false false false false false }" interface=lxcae29ba5ec96e k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9w5wf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97d49490aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9w5wf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8884fd5dc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1556 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zcjcg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97d49490aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9w5wf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8884fd5dc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1556 identity=60749 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zcjcg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8884fd5dc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1556 identity=60749 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zcjcg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=97d49490aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9w5wf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97d49490aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=30486 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9w5wf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97d49490aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=30486 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9w5wf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=97d49490aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=101 identity=30486 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9w5wf subsys=endpoint level=info msg="Successful endpoint creation" containerID=97d49490aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=101 identity=30486 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9w5wf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8884fd5dc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1556 identity=60749 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zcjcg subsys=endpoint level=info msg="Successful endpoint creation" containerID=8884fd5dc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1556 identity=60749 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zcjcg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.123 85a1672c-5d4c-4c33-abbf-dbc879c0fe04 default }" containerID=5356a355fc2c44416b17b44ea7c5b791302a18eb7efcc32d7f2089cad269ab78 datapathConfiguration="&{false false false false false }" interface=lxce06bb351e049 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8p2h9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5356a355fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1617 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8p2h9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5356a355fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1617 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8p2h9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5356a355fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1617 identity=491 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8p2h9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5356a355fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1617 identity=491 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8p2h9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5356a355fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1617 identity=491 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8p2h9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5356a355fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1617 identity=491 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8p2h9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.26 ec2f58bf-ee8c-4e13-b2a5-32c87c37f238 default }" containerID=8f2e8de1959065c630ed552ebbac35d8aed9e363569024d174fa2617a8ad85a8 datapathConfiguration="&{false false false false false }" interface=lxc383c8cc03dd0 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7zk8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f2e8de195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7zk8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f2e8de195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7zk8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f2e8de195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identity=61367 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7zk8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f2e8de195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identity=61367 ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7zk8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f2e8de195 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1153 identity=61367 ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7zk8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f2e8de195 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1153 identity=61367 ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7zk8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=696 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-171-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00696 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00696 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00696 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00696:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=696 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 21e76225-109c-4760-af3c-40231532ad02 default }" containerID=b505985f06eda1c749ae389362610f258d2bd09a18235e90546ef9911c4192e6 datapathConfiguration="&{false false false false false }" interface=lxc109b15fc0cc5 k8sPodName=monitoring/kube-prometheus-stack-admission-create-wls4v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b505985f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1534 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wls4v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b505985f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1534 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=33a5d38a-21c2-4d30-8a3b-4e17c6ba416c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=33a5d38a-21c2-4d30-8a3b-4e17c6ba416c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wls4v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=33a5d38a-21c2-4d30-8a3b-4e17c6ba416c;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=33a5d38a-21c2-4d30-8a3b-4e17c6ba416c;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b505985f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1534 identity=1999 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=33a5d38a-21c2-4d30-8a3b-4e17c6ba416c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=33a5d38a-21c2-4d30-8a3b-4e17c6ba416c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wls4v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b505985f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1534 identity=1999 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wls4v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b505985f06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1534 identity=1999 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wls4v subsys=endpoint level=info msg="Successful endpoint creation" containerID=b505985f06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1534 identity=1999 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wls4v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b505985f06 endpointID=1534 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-wls4v subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=33a5d38a-21c2-4d30-8a3b-4e17c6ba416c k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=33a5d38a-21c2-4d30-8a3b-4e17c6ba416c k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=b505985f06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1534 identity=1999 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wls4v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 09ad9ba4-f3d3-4784-8ecc-53fcadea6f9e default }" containerID=868cb5d946d21a0dbf21dc25875dfacaeab531f6ffdb9e1e5b15a83ddc5ed67b datapathConfiguration="&{false false false false false }" interface=lxc84dfb976abe8 k8sPodName=monitoring/kube-prometheus-stack-grafana-8488f4dc9d-gcl29 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=868cb5d946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2421 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8488f4dc9d-gcl29 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=868cb5d946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2421 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8488f4dc9d-gcl29 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=868cb5d946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2421 identity=3532 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8488f4dc9d-gcl29 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=868cb5d946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2421 identity=3532 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8488f4dc9d-gcl29 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 dbf0f4c2-9ea8-4ca1-a69c-019866a7d9c7 default }" containerID=0d866303739201e2ad512e3b2cfaae7ff70d3676201b89fddb0baeb6d2bd19f8 datapathConfiguration="&{false false false false false }" interface=lxc63f2680f6b19 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cb2kn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d86630373 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3857 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cb2kn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d86630373 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3857 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cb2kn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.215 7fea2d81-f27f-4aaa-b599-268b64eeed3d default }" containerID=d77f9198b2f9465331adbbda7ba3fbe69f8fbab198d72951c97e0f4b7bc3ef93 datapathConfiguration="&{false false false false false }" interface=lxc39917d99f835 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p9bqd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d77f9198b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p9bqd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d77f9198b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p9bqd subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d86630373 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3857 identity=18941 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cb2kn oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=0d86630373 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3857 identity=18941 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cb2kn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d77f9198b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=2596 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p9bqd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d77f9198b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=2596 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p9bqd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=868cb5d946 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2421 identity=3532 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8488f4dc9d-gcl29 subsys=endpoint level=info msg="Successful endpoint creation" containerID=868cb5d946 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2421 identity=3532 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8488f4dc9d-gcl29 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0d86630373 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3857 identity=18941 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cb2kn subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d86630373 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3857 identity=18941 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cb2kn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d77f9198b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=776 identity=2596 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p9bqd subsys=endpoint level=info msg="Successful endpoint creation" containerID=d77f9198b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=776 identity=2596 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p9bqd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.170 b9232601-2bb0-482c-8000-c7b9eb33909a default }" containerID=5dd10bc02050f7519967f10a05d78722bbc83ced90baf086903af370704081aa datapathConfiguration="&{false false false false false }" interface=lxc6aa37c218b22 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s5sm5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5dd10bc020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s5sm5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5dd10bc020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=b1e03aaf-f447-4bc0-a31d-d64fbd203314,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b1e03aaf-f447-4bc0-a31d-d64fbd203314,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s5sm5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=b1e03aaf-f447-4bc0-a31d-d64fbd203314;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=b1e03aaf-f447-4bc0-a31d-d64fbd203314;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5dd10bc020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=6474 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=b1e03aaf-f447-4bc0-a31d-d64fbd203314,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b1e03aaf-f447-4bc0-a31d-d64fbd203314,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s5sm5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5dd10bc020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=6474 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s5sm5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5dd10bc020 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=13 identity=6474 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s5sm5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5dd10bc020 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=13 identity=6474 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s5sm5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5dd10bc020 endpointID=13 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-s5sm5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=b1e03aaf-f447-4bc0-a31d-d64fbd203314 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=b1e03aaf-f447-4bc0-a31d-d64fbd203314 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=5dd10bc020 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=13 identity=6474 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s5sm5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 46845f40-bde5-4045-84ae-9cc6b74146b2 default }" containerID=45068b20e6b73e320eae001ec3d11a6d686b8e2f5f19f5d5bc2e6f2f7312eba1 datapathConfiguration="&{false false false false false }" interface=lxc4aee3586f809 k8sPodName=local-path-storage/helper-pod-create-pvc-e92bca58-e2f0-448e-83fa-b9243a449d93 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45068b20e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92bca58-e2f0-448e-83fa-b9243a449d93 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45068b20e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92bca58-e2f0-448e-83fa-b9243a449d93 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45068b20e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=23370 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92bca58-e2f0-448e-83fa-b9243a449d93 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45068b20e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=23370 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92bca58-e2f0-448e-83fa-b9243a449d93 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45068b20e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=191 identity=23370 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92bca58-e2f0-448e-83fa-b9243a449d93 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45068b20e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=191 identity=23370 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92bca58-e2f0-448e-83fa-b9243a449d93 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.237 d24efafe-5aa0-4179-a029-b3354fd9c314 default }" containerID=a38253565d5b35d7bd7c12911d84d1de3b4e7b32059ea285bc79f4193c00f7e4 datapathConfiguration="&{false false false false false }" interface=lxc54fed92d84fc k8sPodName=local-path-storage/helper-pod-create-pvc-47d3caa6-5046-44cf-a2a8-6aff2cf92f63 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a38253565d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1206 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-47d3caa6-5046-44cf-a2a8-6aff2cf92f63 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a38253565d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1206 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-47d3caa6-5046-44cf-a2a8-6aff2cf92f63 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a38253565d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1206 identity=23370 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-47d3caa6-5046-44cf-a2a8-6aff2cf92f63 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a38253565d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1206 identity=23370 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-47d3caa6-5046-44cf-a2a8-6aff2cf92f63 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a38253565d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1206 identity=23370 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-47d3caa6-5046-44cf-a2a8-6aff2cf92f63 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a38253565d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1206 identity=23370 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-47d3caa6-5046-44cf-a2a8-6aff2cf92f63 subsys=daemon level=info msg="Delete endpoint request" containerID=45068b20e6 endpointID=191 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e92bca58-e2f0-448e-83fa-b9243a449d93 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=45068b20e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=191 identity=23370 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92bca58-e2f0-448e-83fa-b9243a449d93 subsys=endpoint level=info msg="Delete endpoint request" containerID=a38253565d endpointID=1206 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-47d3caa6-5046-44cf-a2a8-6aff2cf92f63 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a38253565d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1206 identity=23370 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-47d3caa6-5046-44cf-a2a8-6aff2cf92f63 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 88de7c21-e782-4533-a42b-7f5e3ddb3393 default }" containerID=b6d9090d1647f24b88c3b84e271554c640198e343c86c97932f9ada7da8cfcb3 datapathConfiguration="&{false false false false false }" interface=lxc1f33d1536c66 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6d9090d16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6d9090d16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b6d9090d16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identity=53485 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6d9090d16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identity=53485 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6d9090d16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1312 identity=53485 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6d9090d16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1312 identity=53485 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.206 7aa7f7cd-e284-428b-8d8b-b865556a650a default }" containerID=f8adb7291a8abbe635bcc40adf65889dd550fa8f29a7a4b9bd28be97678b5c92 datapathConfiguration="&{false false false false false }" interface=lxc3e38b3e1e236 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8adb7291a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8adb7291a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8adb7291a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=62583 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8adb7291a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=62583 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8adb7291a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=804 identity=62583 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8adb7291a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=804 identity=62583 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 503c2022-12f1-4ac3-ba29-43c68b8c6704 default }" containerID=1dbc23bd7b93dcc2723cb8b017394d6fad6042ee6e51a1dfb682492ae04abca9 datapathConfiguration="&{false false false false false }" interface=lxcb2006f9b8509 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.37 1f20a984-16d5-4113-bf02-cdea43210871 default }" containerID=8ed3b6094de32079a85bbd9cad616e85d7dc3dc211000204b54ac6012e179a5b datapathConfiguration="&{false false false false false }" interface=lxc800afdfdcf17 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dbc23bd7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1047 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=8ed3b6094d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dbc23bd7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1047 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=8ed3b6094d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 9b823586-3a1b-442f-804e-8aaf5e4142cd default }" containerID=d06bb5986d34df4af77ab0f2cb10910b38d3f886500f8741d0086fce78b825ca datapathConfiguration="&{false false false false false }" interface=lxcb370079e4e09 k8sPodName=monitoring/loki-gateway-cf54cb88c-r6t9v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d06bb5986d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3681 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-r6t9v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d06bb5986d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3681 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-r6t9v subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1dbc23bd7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1047 identity=49581 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dbc23bd7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1047 identity=49581 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ed3b6094d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 identity=2935 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ed3b6094d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 identity=2935 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d06bb5986d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3681 identity=3079 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-r6t9v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d06bb5986d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3681 identity=3079 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-r6t9v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1dbc23bd7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1047 identity=49581 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dbc23bd7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1047 identity=49581 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8ed3b6094d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3521 identity=2935 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ed3b6094d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3521 identity=2935 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d06bb5986d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3681 identity=3079 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-r6t9v subsys=endpoint level=info msg="Successful endpoint creation" containerID=d06bb5986d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3681 identity=3079 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-r6t9v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.170 3566af5a-48ae-451c-96ef-5099fa2e7945 default }" containerID=d563f18e97fa802600f09d0e78248a8bc0d2f1528352385958fcc460f73a6986 datapathConfiguration="&{false false false false false }" interface=lxca2a05c494310 k8sPodName=local-path-storage/helper-pod-create-pvc-d88cc7d1-4081-47ac-9265-2a81edfb3624 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d563f18e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d88cc7d1-4081-47ac-9265-2a81edfb3624 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d563f18e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d88cc7d1-4081-47ac-9265-2a81edfb3624 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d563f18e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identity=23370 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d88cc7d1-4081-47ac-9265-2a81edfb3624 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d563f18e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identity=23370 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d88cc7d1-4081-47ac-9265-2a81edfb3624 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d563f18e97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2000 identity=23370 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d88cc7d1-4081-47ac-9265-2a81edfb3624 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d563f18e97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2000 identity=23370 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d88cc7d1-4081-47ac-9265-2a81edfb3624 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.175 aac49ec2-ed91-4cae-aff1-e3685ac7a1f3 default }" containerID=154d23e95333b9f1f278362780728a02412acf1c2c0554ecabf836aceabffee1 datapathConfiguration="&{false false false false false }" interface=lxc9183e5e6825e k8sPodName=monitoring/vector-bn2sn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=154d23e953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-bn2sn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=154d23e953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-bn2sn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=154d23e953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identity=33997 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-bn2sn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=154d23e953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identity=33997 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-bn2sn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=154d23e953 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=930 identity=33997 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-bn2sn subsys=endpoint level=info msg="Successful endpoint creation" containerID=154d23e953 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=930 identity=33997 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/vector-bn2sn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d563f18e97 endpointID=2000 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d88cc7d1-4081-47ac-9265-2a81edfb3624 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d563f18e97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2000 identity=23370 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d88cc7d1-4081-47ac-9265-2a81edfb3624 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 a09ba349-e178-470d-ae61-67f3ab90b24d default }" containerID=d70bd1d0607bcdc33be88cca80e7c1395559f07148bc91d967b23741e0c95bfa datapathConfiguration="&{false false false false false }" interface=lxc0ea52e353afe k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-24sf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d70bd1d060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-24sf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d70bd1d060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-24sf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d70bd1d060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=57920 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-24sf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d70bd1d060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=57920 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-24sf7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d70bd1d060 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=620 identity=57920 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-24sf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d70bd1d060 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=620 identity=57920 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-24sf7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.32 449708cd-c88e-4a80-b8d6-d44f5e72cb29 default }" containerID=300584941769f8d5282fef5ec9c3f321f1dfea943f9019733fee4d3c3deaba71 datapathConfiguration="&{false false false false false }" interface=lxc64fe008da33c k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3005849417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3649 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3005849417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3649 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3005849417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3649 identity=28766 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3005849417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3649 identity=28766 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3005849417 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3649 identity=28766 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3005849417 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3649 identity=28766 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.154 351d1b7b-4402-4414-8683-55e9b5ded67b default }" containerID=125ac9cbe1c3ec984fc62e1f66c9ea6e7278a199868e71fc3178e1c2b4fd8f35 datapathConfiguration="&{false false false false false }" interface=lxcc7104e1f533a k8sPodName=openstack/memcached-memcached-6479589586-j4pzv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=125ac9cbe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1198 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j4pzv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=125ac9cbe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1198 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j4pzv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=125ac9cbe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1198 identity=9971 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j4pzv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=125ac9cbe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1198 identity=9971 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j4pzv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=125ac9cbe1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1198 identity=9971 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j4pzv subsys=endpoint level=info msg="Successful endpoint creation" containerID=125ac9cbe1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1198 identity=9971 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j4pzv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.244 64bb6ca3-d348-4e42-b511-4d3027173553 default }" containerID=362ffc383304505c1bd48850c98cf429fd5de4450d0498b20be1b7d0493fdc7a datapathConfiguration="&{false false false false false }" interface=lxc579616d8989b k8sPodName=local-path-storage/helper-pod-create-pvc-2f543eb2-fc6a-4b67-a227-7a848b6117f9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=362ffc3833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2988 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f543eb2-fc6a-4b67-a227-7a848b6117f9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=362ffc3833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2988 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f543eb2-fc6a-4b67-a227-7a848b6117f9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=362ffc3833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2988 identity=23370 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f543eb2-fc6a-4b67-a227-7a848b6117f9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=362ffc3833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2988 identity=23370 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f543eb2-fc6a-4b67-a227-7a848b6117f9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=362ffc3833 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2988 identity=23370 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f543eb2-fc6a-4b67-a227-7a848b6117f9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=362ffc3833 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2988 identity=23370 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f543eb2-fc6a-4b67-a227-7a848b6117f9 subsys=daemon level=info msg="Delete endpoint request" containerID=362ffc3833 endpointID=2988 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2f543eb2-fc6a-4b67-a227-7a848b6117f9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=362ffc3833 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2988 identity=23370 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f543eb2-fc6a-4b67-a227-7a848b6117f9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 7592dbfa-4448-4146-a828-96a84b4b298d default }" containerID=01c902e80460da8f8c53f6a1b211c667021b3fceb18207c6f496bd4e2b65d9e2 datapathConfiguration="&{false false false false false }" interface=lxc29d569355796 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01c902e804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3898 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01c902e804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3898 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=01c902e804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3898 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=01c902e804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3898 identity=21637 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01c902e804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3898 identity=21637 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01c902e804 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3898 identity=21637 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=01c902e804 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3898 identity=21637 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.133 5709c004-7887-450c-b072-c48b25772023 default }" containerID=00367182fc66570a10ed78e2c2aceea2f6c6248ac58dd1e2fd75306ac36b11c1 datapathConfiguration="&{false false false false false }" interface=lxc9f9500a48b87 k8sPodName=openstack/keystone-api-8765478b-dc426 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00367182fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=707 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/keystone-api-8765478b-dc426 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00367182fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=707 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/keystone-api-8765478b-dc426 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00367182fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=707 identity=34784 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/keystone-api-8765478b-dc426 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=00367182fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=707 identity=34784 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/keystone-api-8765478b-dc426 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 5db3e197-80a1-4c98-a007-23f629a7dc01 default }" containerID=5f7091343ff940ea24487f524a2c447ac879ee546ed8d99358058245f5f605a1 datapathConfiguration="&{false false false false false }" interface=lxcc5b14dee08fb k8sPodName=openstack/keystone-credential-setup-9mjt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f7091343f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2786 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-credential-setup-9mjt7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f7091343f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2786 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a145beb3-7cf8-4dbb-ae1a-a71c6abf86b0,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=a145beb3-7cf8-4dbb-ae1a-a71c6abf86b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-credential-setup-9mjt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a145beb3-7cf8-4dbb-ae1a-a71c6abf86b0;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=a145beb3-7cf8-4dbb-ae1a-a71c6abf86b0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f7091343f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2786 identity=52634 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a145beb3-7cf8-4dbb-ae1a-a71c6abf86b0,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=a145beb3-7cf8-4dbb-ae1a-a71c6abf86b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-credential-setup-9mjt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f7091343f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2786 identity=52634 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-credential-setup-9mjt7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00367182fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=707 identity=34784 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/keystone-api-8765478b-dc426 subsys=endpoint level=info msg="Successful endpoint creation" containerID=00367182fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=707 identity=34784 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/keystone-api-8765478b-dc426 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5f7091343f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2786 identity=52634 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-credential-setup-9mjt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f7091343f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2786 identity=52634 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-credential-setup-9mjt7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5f7091343f endpointID=2786 k8sNamespace=openstack k8sPodName=keystone-credential-setup-9mjt7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a145beb3-7cf8-4dbb-ae1a-a71c6abf86b0 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=a145beb3-7cf8-4dbb-ae1a-a71c6abf86b0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5f7091343f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2786 identity=52634 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-credential-setup-9mjt7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 529d72ba-2aa7-4658-9a31-8d1fa4b3eaad default }" containerID=37c114e8424c20cebea7f1d2e81eda0e26d521cfe6defb8209b3fe251a6b858d datapathConfiguration="&{false false false false false }" interface=lxc1f273ebb3643 k8sPodName=openstack/keystone-db-init-2zpnr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37c114e842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-db-init-2zpnr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37c114e842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b5fb2e1f-8e96-497d-9779-dfaee056cd25,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b5fb2e1f-8e96-497d-9779-dfaee056cd25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-db-init-2zpnr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b5fb2e1f-8e96-497d-9779-dfaee056cd25;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=b5fb2e1f-8e96-497d-9779-dfaee056cd25;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=37c114e842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identity=36633 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b5fb2e1f-8e96-497d-9779-dfaee056cd25,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b5fb2e1f-8e96-497d-9779-dfaee056cd25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-db-init-2zpnr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37c114e842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identity=36633 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-db-init-2zpnr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37c114e842 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1097 identity=36633 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-db-init-2zpnr subsys=endpoint level=info msg="Successful endpoint creation" containerID=37c114e842 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1097 identity=36633 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-db-init-2zpnr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=37c114e842 endpointID=1097 k8sNamespace=openstack k8sPodName=keystone-db-init-2zpnr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b5fb2e1f-8e96-497d-9779-dfaee056cd25 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=b5fb2e1f-8e96-497d-9779-dfaee056cd25 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=37c114e842 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1097 identity=36633 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-db-init-2zpnr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 6dbe23e8-489a-470b-8ca1-28979315cd9f default }" containerID=30ed1de26bf017011258f425cbe592649720b3fed25afa70a6a2fb11bf7d2cb2 datapathConfiguration="&{false false false false false }" interface=lxcfc19f35686be k8sPodName=openstack/keystone-fernet-setup-d2m5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30ed1de26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-fernet-setup-d2m5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30ed1de26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0c7d2ba5-0921-42c8-b14b-9bc28a1c81c5,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=0c7d2ba5-0921-42c8-b14b-9bc28a1c81c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-fernet-setup-d2m5d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=30ed1de26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-fernet-setup-d2m5d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0c7d2ba5-0921-42c8-b14b-9bc28a1c81c5;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=0c7d2ba5-0921-42c8-b14b-9bc28a1c81c5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30ed1de26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identity=20039 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0c7d2ba5-0921-42c8-b14b-9bc28a1c81c5,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=0c7d2ba5-0921-42c8-b14b-9bc28a1c81c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-fernet-setup-d2m5d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30ed1de26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identity=20039 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-fernet-setup-d2m5d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30ed1de26b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=554 identity=20039 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-fernet-setup-d2m5d subsys=endpoint level=info msg="Successful endpoint creation" containerID=30ed1de26b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=554 identity=20039 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-fernet-setup-d2m5d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=30ed1de26b endpointID=554 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-d2m5d subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0c7d2ba5-0921-42c8-b14b-9bc28a1c81c5 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=0c7d2ba5-0921-42c8-b14b-9bc28a1c81c5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=30ed1de26b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=554 identity=20039 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-fernet-setup-d2m5d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 22d15226-9c41-4b16-bea9-3c199c00e769 default }" containerID=c3f74354d004fb1c907f1d098f7e114027d9296d0bd7c4ed9ff4876265a2710a datapathConfiguration="&{false false false false false }" interface=lxc0451a095c15f k8sPodName=openstack/keystone-db-sync-dvn26 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3f74354d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-db-sync-dvn26 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3f74354d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=44fb9d57-d27e-454b-8bf4-383ae1e762b5,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=44fb9d57-d27e-454b-8bf4-383ae1e762b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-db-sync-dvn26 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c3f74354d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-db-sync-dvn26 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=44fb9d57-d27e-454b-8bf4-383ae1e762b5;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=44fb9d57-d27e-454b-8bf4-383ae1e762b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3f74354d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identity=20184 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=44fb9d57-d27e-454b-8bf4-383ae1e762b5,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=44fb9d57-d27e-454b-8bf4-383ae1e762b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-db-sync-dvn26 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3f74354d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identity=20184 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-db-sync-dvn26 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3f74354d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=463 identity=20184 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-db-sync-dvn26 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3f74354d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=463 identity=20184 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-db-sync-dvn26 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c3f74354d0 endpointID=463 k8sNamespace=openstack k8sPodName=keystone-db-sync-dvn26 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=44fb9d57-d27e-454b-8bf4-383ae1e762b5 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=44fb9d57-d27e-454b-8bf4-383ae1e762b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c3f74354d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=463 identity=20184 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-db-sync-dvn26 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 6ddf84dc-91a8-4a1c-898e-f9467ddb27c1 default }" containerID=263433c5846563b338fc3615846a744b93b93358384925e440dfbec9226b8b0d datapathConfiguration="&{false false false false false }" interface=lxc692df1553000 k8sPodName=openstack/keystone-rabbit-init-pvl4z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=263433c584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-rabbit-init-pvl4z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=263433c584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f6ebd545-b4b4-4dff-a614-14bc874f5cd1,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f6ebd545-b4b4-4dff-a614-14bc874f5cd1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-rabbit-init-pvl4z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=263433c584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-rabbit-init-pvl4z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f6ebd545-b4b4-4dff-a614-14bc874f5cd1;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f6ebd545-b4b4-4dff-a614-14bc874f5cd1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=263433c584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=8555 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f6ebd545-b4b4-4dff-a614-14bc874f5cd1,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f6ebd545-b4b4-4dff-a614-14bc874f5cd1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-rabbit-init-pvl4z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=263433c584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=8555 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-rabbit-init-pvl4z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=263433c584 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1197 identity=8555 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-rabbit-init-pvl4z subsys=endpoint level=info msg="Successful endpoint creation" containerID=263433c584 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1197 identity=8555 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-rabbit-init-pvl4z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=263433c584 endpointID=1197 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-pvl4z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f6ebd545-b4b4-4dff-a614-14bc874f5cd1 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f6ebd545-b4b4-4dff-a614-14bc874f5cd1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=263433c584 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1197 identity=8555 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-rabbit-init-pvl4z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 c0751968-1d08-484a-b273-539d2688a493 default }" containerID=5125d788c89cba47477441768b754d1cefae8d5e6286b671d54412654f19bfb7 datapathConfiguration="&{false false false false false }" interface=lxc8e9f5e655aed k8sPodName=openstack/keystone-domain-manage-vxk8x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5125d788c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-domain-manage-vxk8x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5125d788c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=319d16c5-aadb-41df-96cc-5d2c4d11b15f,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=319d16c5-aadb-41df-96cc-5d2c4d11b15f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-domain-manage-vxk8x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5125d788c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-domain-manage-vxk8x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=319d16c5-aadb-41df-96cc-5d2c4d11b15f;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=319d16c5-aadb-41df-96cc-5d2c4d11b15f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5125d788c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 identity=18943 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=319d16c5-aadb-41df-96cc-5d2c4d11b15f,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=319d16c5-aadb-41df-96cc-5d2c4d11b15f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-domain-manage-vxk8x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5125d788c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 identity=18943 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-domain-manage-vxk8x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5125d788c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=998 identity=18943 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-domain-manage-vxk8x subsys=endpoint level=info msg="Successful endpoint creation" containerID=5125d788c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=998 identity=18943 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-domain-manage-vxk8x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5125d788c8 endpointID=998 k8sNamespace=openstack k8sPodName=keystone-domain-manage-vxk8x subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=319d16c5-aadb-41df-96cc-5d2c4d11b15f k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=319d16c5-aadb-41df-96cc-5d2c4d11b15f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5125d788c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=998 identity=18943 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-domain-manage-vxk8x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 26b9e34d-97f2-4295-b60f-5e1ced16b2dd default }" containerID=662464202f3cabaf19a942c4c86d690cddd07b7ed1d9a2046c20d58a4dd109f9 datapathConfiguration="&{false false false false false }" interface=lxc974a5fa43dec k8sPodName=openstack/keystone-bootstrap-9qrsg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=662464202f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-bootstrap-9qrsg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=662464202f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2df7050a-c3c2-4399-a359-f85675662b66,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=2df7050a-c3c2-4399-a359-f85675662b66,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-bootstrap-9qrsg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2df7050a-c3c2-4399-a359-f85675662b66;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=2df7050a-c3c2-4399-a359-f85675662b66;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=662464202f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identity=4725 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2df7050a-c3c2-4399-a359-f85675662b66,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=2df7050a-c3c2-4399-a359-f85675662b66,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-bootstrap-9qrsg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=662464202f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identity=4725 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-bootstrap-9qrsg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=662464202f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=682 identity=4725 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-bootstrap-9qrsg subsys=endpoint level=info msg="Successful endpoint creation" containerID=662464202f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=682 identity=4725 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-bootstrap-9qrsg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=662464202f endpointID=682 k8sNamespace=openstack k8sPodName=keystone-bootstrap-9qrsg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2df7050a-c3c2-4399-a359-f85675662b66 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=2df7050a-c3c2-4399-a359-f85675662b66 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=662464202f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=682 identity=4725 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-bootstrap-9qrsg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 197205aa-bbce-4639-85b9-5929f5271856 default }" containerID=36075c2c245cf168be31d8dae3b14e91d1f43eb803cc71ae59e9c21092603287 datapathConfiguration="&{false false false false false }" interface=lxc4407b264d159 k8sPodName=local-path-storage/helper-pod-create-pvc-b539577c-1145-4790-b702-0fdf1ad555a9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36075c2c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b539577c-1145-4790-b702-0fdf1ad555a9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36075c2c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b539577c-1145-4790-b702-0fdf1ad555a9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36075c2c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identity=23370 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b539577c-1145-4790-b702-0fdf1ad555a9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36075c2c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identity=23370 ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b539577c-1145-4790-b702-0fdf1ad555a9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36075c2c24 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=913 identity=23370 ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b539577c-1145-4790-b702-0fdf1ad555a9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=36075c2c24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=913 identity=23370 ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b539577c-1145-4790-b702-0fdf1ad555a9 subsys=daemon level=info msg="Delete endpoint request" containerID=36075c2c24 endpointID=913 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b539577c-1145-4790-b702-0fdf1ad555a9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=36075c2c24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=913 identity=23370 ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b539577c-1145-4790-b702-0fdf1ad555a9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 281aa830-46cd-4979-ac05-b98b21c6bf03 default }" containerID=10e48c1fd87330eafc467efa74f15bbd35a6edc0d46fc74f81f488a486322a51 datapathConfiguration="&{false false false false false }" interface=lxc053dbd9d7390 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10e48c1fd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10e48c1fd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10e48c1fd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identity=15547 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10e48c1fd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identity=15547 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=10e48c1fd8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=407 identity=15547 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=10e48c1fd8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=407 identity=15547 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.164 a97b154c-0808-4076-b6ed-34eae506cf23 default }" containerID=c1484583aa7b387dc57a065993a446c904ee61f151a6acef856cb4e3b7b6a021 datapathConfiguration="&{false false false false false }" interface=lxc5174ce450e55 k8sPodName=openstack/barbican-api-b575f7fb9-xj8cj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1484583aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/barbican-api-b575f7fb9-xj8cj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1484583aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/barbican-api-b575f7fb9-xj8cj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c1484583aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.164 ipv6= k8sPodName=openstack/barbican-api-b575f7fb9-xj8cj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1484583aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 identity=23880 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/barbican-api-b575f7fb9-xj8cj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1484583aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 identity=23880 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/barbican-api-b575f7fb9-xj8cj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 b1a369f3-218b-43aa-b64e-ba76d26db9a9 default }" containerID=49a50b2727419d0806ca60765fdf2ce558731dbde2b3cef245711b45e56ef5dc datapathConfiguration="&{false false false false false }" interface=lxc659dfbc97968 k8sPodName=openstack/barbican-db-init-qsfjk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49a50b2727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-init-qsfjk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49a50b2727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a417a1f6-88d7-467a-bdaa-336cf978095a,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a417a1f6-88d7-467a-bdaa-336cf978095a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-init-qsfjk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a417a1f6-88d7-467a-bdaa-336cf978095a;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=a417a1f6-88d7-467a-bdaa-336cf978095a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49a50b2727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 identity=23956 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a417a1f6-88d7-467a-bdaa-336cf978095a,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a417a1f6-88d7-467a-bdaa-336cf978095a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-init-qsfjk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49a50b2727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 identity=23956 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-init-qsfjk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1484583aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1345 identity=23880 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/barbican-api-b575f7fb9-xj8cj subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1484583aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1345 identity=23880 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/barbican-api-b575f7fb9-xj8cj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=49a50b2727 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1745 identity=23956 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-init-qsfjk subsys=endpoint level=info msg="Successful endpoint creation" containerID=49a50b2727 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1745 identity=23956 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-init-qsfjk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=49a50b2727 endpointID=1745 k8sNamespace=openstack k8sPodName=barbican-db-init-qsfjk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a417a1f6-88d7-467a-bdaa-336cf978095a k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=a417a1f6-88d7-467a-bdaa-336cf978095a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=49a50b2727 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1745 identity=23956 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-init-qsfjk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 0f31322c-4b2c-42c7-8b82-94cb312a573f default }" containerID=5aea07683353764f4ea705bd038bf28a2db81a2b28a982fd7d21958dfc40c1c3 datapathConfiguration="&{false false false false false }" interface=lxc4cb39cbe9201 k8sPodName=openstack/barbican-db-sync-j77tx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5aea076833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3861 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-db-sync-j77tx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5aea076833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3861 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=94ec1a63-92d9-4f8d-8d21-08b68ed2a1ed,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=94ec1a63-92d9-4f8d-8d21-08b68ed2a1ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-db-sync-j77tx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=94ec1a63-92d9-4f8d-8d21-08b68ed2a1ed;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=94ec1a63-92d9-4f8d-8d21-08b68ed2a1ed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5aea076833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3861 identity=27549 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=94ec1a63-92d9-4f8d-8d21-08b68ed2a1ed,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=94ec1a63-92d9-4f8d-8d21-08b68ed2a1ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-db-sync-j77tx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5aea076833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3861 identity=27549 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-db-sync-j77tx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5aea076833 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3861 identity=27549 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-db-sync-j77tx subsys=endpoint level=info msg="Successful endpoint creation" containerID=5aea076833 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3861 identity=27549 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-db-sync-j77tx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5aea076833 endpointID=3861 k8sNamespace=openstack k8sPodName=barbican-db-sync-j77tx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=94ec1a63-92d9-4f8d-8d21-08b68ed2a1ed k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=94ec1a63-92d9-4f8d-8d21-08b68ed2a1ed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5aea076833 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3861 identity=27549 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-db-sync-j77tx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 3c203868-a3e4-4432-8d8f-f87e823191ba default }" containerID=1d9c62dae143e6932a51534cc1bbc7df1148a8244697fd6408dced667b6dfa5f datapathConfiguration="&{false false false false false }" interface=lxc2fb7a86cfad3 k8sPodName=openstack/barbican-rabbit-init-v2rb8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d9c62dae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1894 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-rabbit-init-v2rb8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d9c62dae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1894 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=071eb99d-05ba-464e-8d08-29b22ba2cfd1,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=071eb99d-05ba-464e-8d08-29b22ba2cfd1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-rabbit-init-v2rb8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=071eb99d-05ba-464e-8d08-29b22ba2cfd1;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=071eb99d-05ba-464e-8d08-29b22ba2cfd1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d9c62dae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1894 identity=5840 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=071eb99d-05ba-464e-8d08-29b22ba2cfd1,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=071eb99d-05ba-464e-8d08-29b22ba2cfd1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-rabbit-init-v2rb8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d9c62dae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1894 identity=5840 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-rabbit-init-v2rb8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1d9c62dae1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1894 identity=5840 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-rabbit-init-v2rb8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d9c62dae1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1894 identity=5840 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-rabbit-init-v2rb8 subsys=daemon level=info msg="Delete endpoint request" containerID=1d9c62dae1 endpointID=1894 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-v2rb8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=071eb99d-05ba-464e-8d08-29b22ba2cfd1 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=071eb99d-05ba-464e-8d08-29b22ba2cfd1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1d9c62dae1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1894 identity=5840 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-rabbit-init-v2rb8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 0db0c1e7-8a30-4dfb-aeb5-e126b38ccb80 default }" containerID=fd7cf5242e98c421bcb9d30578f747e4c25433de3eda50b3234912eae60c8d27 datapathConfiguration="&{false false false false false }" interface=lxcb09990703f92 k8sPodName=openstack/barbican-ks-service-b2k99 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd7cf5242e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3408 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-ks-service-b2k99 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd7cf5242e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3408 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ec9cbe51-c257-4141-a82b-21a034e31f3c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=ec9cbe51-c257-4141-a82b-21a034e31f3c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-ks-service-b2k99 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ec9cbe51-c257-4141-a82b-21a034e31f3c;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=ec9cbe51-c257-4141-a82b-21a034e31f3c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fd7cf5242e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3408 identity=13984 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ec9cbe51-c257-4141-a82b-21a034e31f3c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=ec9cbe51-c257-4141-a82b-21a034e31f3c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-ks-service-b2k99 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd7cf5242e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3408 identity=13984 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-ks-service-b2k99 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd7cf5242e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3408 identity=13984 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-ks-service-b2k99 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd7cf5242e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3408 identity=13984 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-ks-service-b2k99 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036147145156708645 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=fd7cf5242e endpointID=3408 k8sNamespace=openstack k8sPodName=barbican-ks-service-b2k99 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ec9cbe51-c257-4141-a82b-21a034e31f3c k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=ec9cbe51-c257-4141-a82b-21a034e31f3c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fd7cf5242e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3408 identity=13984 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-ks-service-b2k99 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 ecab5e80-9552-43a5-9bb4-fe022170c53d default }" containerID=63671ef6c356153d6a352f7beb0b48e7942059a2b3f0aadc63adb72a10fef46d datapathConfiguration="&{false false false false false }" interface=lxc5714d22fae46 k8sPodName=openstack/barbican-ks-endpoints-khjsw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63671ef6c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-ks-endpoints-khjsw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63671ef6c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=207bbcc6-9542-4f15-b51e-4308e51cc305,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=207bbcc6-9542-4f15-b51e-4308e51cc305,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-ks-endpoints-khjsw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=207bbcc6-9542-4f15-b51e-4308e51cc305;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=207bbcc6-9542-4f15-b51e-4308e51cc305;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63671ef6c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identity=64926 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=207bbcc6-9542-4f15-b51e-4308e51cc305,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=207bbcc6-9542-4f15-b51e-4308e51cc305,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-ks-endpoints-khjsw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63671ef6c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identity=64926 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-ks-endpoints-khjsw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=63671ef6c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=70 identity=64926 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-ks-endpoints-khjsw subsys=endpoint level=info msg="Successful endpoint creation" containerID=63671ef6c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=70 identity=64926 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-ks-endpoints-khjsw subsys=daemon level=info msg="Delete endpoint request" containerID=63671ef6c3 endpointID=70 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-khjsw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=207bbcc6-9542-4f15-b51e-4308e51cc305 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=207bbcc6-9542-4f15-b51e-4308e51cc305 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=63671ef6c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=70 identity=64926 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-ks-endpoints-khjsw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 1094dc3a-b0d8-4474-a3a7-76a2886206a5 default }" containerID=ab04023c7e5393fb67cb02e1f453dac99a7ba0209fe601511ffd7fff18790497 datapathConfiguration="&{false false false false false }" interface=lxc29fc5afc5440 k8sPodName=openstack/barbican-ks-user-bv4rt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab04023c7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-ks-user-bv4rt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab04023c7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=39bd961b-2017-4650-a60c-a12c3c8c5ef9,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=39bd961b-2017-4650-a60c-a12c3c8c5ef9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-ks-user-bv4rt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ab04023c7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-ks-user-bv4rt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=39bd961b-2017-4650-a60c-a12c3c8c5ef9;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=39bd961b-2017-4650-a60c-a12c3c8c5ef9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab04023c7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identity=24310 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=39bd961b-2017-4650-a60c-a12c3c8c5ef9,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=39bd961b-2017-4650-a60c-a12c3c8c5ef9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-ks-user-bv4rt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab04023c7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identity=24310 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-ks-user-bv4rt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab04023c7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=171 identity=24310 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-ks-user-bv4rt subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab04023c7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=171 identity=24310 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-ks-user-bv4rt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ab04023c7e endpointID=171 k8sNamespace=openstack k8sPodName=barbican-ks-user-bv4rt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=39bd961b-2017-4650-a60c-a12c3c8c5ef9 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=39bd961b-2017-4650-a60c-a12c3c8c5ef9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ab04023c7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=171 identity=24310 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-ks-user-bv4rt subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.145 e5243088-efeb-4ff4-a480-81879bd82b51 default }" containerID=16a9a97d1f7eaba55aa4ae691568a03b18287b834087b0280ec84652bba8fb77 datapathConfiguration="&{false false false false false }" interface=lxcc468bc3dc127 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dq68d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16a9a97d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1639 ipv4=10.0.0.145 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dq68d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16a9a97d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1639 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.145 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dq68d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=16a9a97d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1639 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dq68d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=16a9a97d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1639 identity=13761 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.145 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dq68d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16a9a97d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1639 identity=13761 ipv4=10.0.0.145 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dq68d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16a9a97d1f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1639 identity=13761 ipv4=10.0.0.145 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dq68d subsys=endpoint level=info msg="Successful endpoint creation" containerID=16a9a97d1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1639 identity=13761 ipv4=10.0.0.145 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dq68d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.28 58a2ebd2-e001-4244-b2cf-e506aec6c46e default }" containerID=fcc1bfe7e2d3b146189a1c3aa113a0d5e7091becacab8e8953a61005c89ea318 datapathConfiguration="&{false false false false false }" interface=lxc8fce5e89974e k8sPodName=openstack/rook-ceph-detect-version-w9xh2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcc1bfe7e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w9xh2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcc1bfe7e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=2ca9cf92-eed4-4ef4-a210-1a17c0a8f584,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=2ca9cf92-eed4-4ef4-a210-1a17c0a8f584,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w9xh2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=2ca9cf92-eed4-4ef4-a210-1a17c0a8f584;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=2ca9cf92-eed4-4ef4-a210-1a17c0a8f584;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fcc1bfe7e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identity=15233 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=2ca9cf92-eed4-4ef4-a210-1a17c0a8f584,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=2ca9cf92-eed4-4ef4-a210-1a17c0a8f584,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w9xh2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fcc1bfe7e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identity=15233 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w9xh2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fcc1bfe7e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=895 identity=15233 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w9xh2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcc1bfe7e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=895 identity=15233 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w9xh2 subsys=daemon level=info msg="Delete endpoint request" containerID=fcc1bfe7e2 endpointID=895 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-w9xh2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=2ca9cf92-eed4-4ef4-a210-1a17c0a8f584 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=2ca9cf92-eed4-4ef4-a210-1a17c0a8f584 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=fcc1bfe7e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=895 identity=15233 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w9xh2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 bbfe2e6f-1f25-42c8-beed-82dba2ed47c1 default }" containerID=0f509b2e626568f619bafc5fd82ae9fc699588ffad809b004bd98082206b84bb datapathConfiguration="&{false false false false false }" interface=lxc291753576179 k8sPodName=openstack/ceph-object-controller-detect-version-tf6mn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f509b2e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tf6mn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f509b2e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d24fddff-3778-47e9-85aa-2caa45cad457,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d24fddff-3778-47e9-85aa-2caa45cad457,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tf6mn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=d24fddff-3778-47e9-85aa-2caa45cad457;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=d24fddff-3778-47e9-85aa-2caa45cad457;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f509b2e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identity=45858 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d24fddff-3778-47e9-85aa-2caa45cad457,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d24fddff-3778-47e9-85aa-2caa45cad457,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tf6mn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f509b2e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identity=45858 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tf6mn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0f509b2e62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=226 identity=45858 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tf6mn subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f509b2e62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=226 identity=45858 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tf6mn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f509b2e62 endpointID=226 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-tf6mn subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=d24fddff-3778-47e9-85aa-2caa45cad457 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=d24fddff-3778-47e9-85aa-2caa45cad457 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=0f509b2e62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=226 identity=45858 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tf6mn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 e8326377-a3f6-4bc4-9c09-927b46ca7ef6 default }" containerID=cb0ceb7e4df20af7f6bec98ffab324b59036d2c6a5a01b0e96b29545683090df datapathConfiguration="&{false false false false false }" interface=lxc5f7193e3b0e1 k8sPodName=local-path-storage/helper-pod-create-pvc-87bcf73a-accb-471c-a559-bc6c44e3dd0f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb0ceb7e4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1647 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87bcf73a-accb-471c-a559-bc6c44e3dd0f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb0ceb7e4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1647 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87bcf73a-accb-471c-a559-bc6c44e3dd0f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb0ceb7e4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1647 identity=23370 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87bcf73a-accb-471c-a559-bc6c44e3dd0f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb0ceb7e4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1647 identity=23370 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87bcf73a-accb-471c-a559-bc6c44e3dd0f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb0ceb7e4d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1647 identity=23370 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87bcf73a-accb-471c-a559-bc6c44e3dd0f subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb0ceb7e4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1647 identity=23370 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87bcf73a-accb-471c-a559-bc6c44e3dd0f subsys=daemon level=info msg="Delete endpoint request" containerID=cb0ceb7e4d endpointID=1647 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-87bcf73a-accb-471c-a559-bc6c44e3dd0f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cb0ceb7e4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1647 identity=23370 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87bcf73a-accb-471c-a559-bc6c44e3dd0f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 b3f3e360-4435-4367-9867-b1136a9bd23e default }" containerID=f3bce72c933cf17c7ee9fc506654cb794b94f3dc864b4511376fc8b51eb4430e datapathConfiguration="&{false false false false false }" interface=lxc352eb747f11c k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3bce72c93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1637 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3bce72c93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1637 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f3bce72c93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1637 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3bce72c93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1637 identity=21779 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3bce72c93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1637 identity=21779 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f3bce72c93 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1637 identity=21779 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3bce72c93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1637 identity=21779 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.225 831f3819-1ecc-420b-8f7d-bd697dd4eb18 default }" containerID=5ea0743ded86143ba1129562b83a0d4ff393431fffacd8bf4568c9bea7b3324c datapathConfiguration="&{false false false false false }" interface=lxc4e073568a13d k8sPodName=openstack/glance-db-init-w6s85 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ea0743ded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3598 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-w6s85 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ea0743ded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3598 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a2e60a04-c91c-45e5-b51d-2ac0693100ac,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a2e60a04-c91c-45e5-b51d-2ac0693100ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-w6s85 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a2e60a04-c91c-45e5-b51d-2ac0693100ac;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=a2e60a04-c91c-45e5-b51d-2ac0693100ac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ea0743ded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3598 identity=21606 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a2e60a04-c91c-45e5-b51d-2ac0693100ac,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a2e60a04-c91c-45e5-b51d-2ac0693100ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-w6s85 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ea0743ded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3598 identity=21606 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-w6s85 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5ea0743ded datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3598 identity=21606 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-w6s85 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ea0743ded datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3598 identity=21606 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-w6s85 subsys=daemon level=info msg="Delete endpoint request" containerID=5ea0743ded endpointID=3598 k8sNamespace=openstack k8sPodName=glance-db-init-w6s85 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a2e60a04-c91c-45e5-b51d-2ac0693100ac k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=a2e60a04-c91c-45e5-b51d-2ac0693100ac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5ea0743ded datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3598 identity=21606 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-w6s85 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 777a46ad-89eb-41fc-814e-dfffb50708c5 default }" containerID=45d01f2fc8fdcae12c8a73fa1b885b251c2fe85f0513b0ebcf4fe5faa4fbd6a0 datapathConfiguration="&{false false false false false }" interface=lxcd747f2ac8816 k8sPodName=openstack/glance-db-sync-xkhth labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45d01f2fc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-sync-xkhth subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45d01f2fc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e501e31c-e7a1-446c-b30a-f825c16782c6,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=e501e31c-e7a1-446c-b30a-f825c16782c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-sync-xkhth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e501e31c-e7a1-446c-b30a-f825c16782c6;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=e501e31c-e7a1-446c-b30a-f825c16782c6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45d01f2fc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 identity=2728 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e501e31c-e7a1-446c-b30a-f825c16782c6,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=e501e31c-e7a1-446c-b30a-f825c16782c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-sync-xkhth oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45d01f2fc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 identity=2728 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-sync-xkhth subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=45d01f2fc8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3759 identity=2728 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-sync-xkhth subsys=endpoint level=info msg="Successful endpoint creation" containerID=45d01f2fc8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3759 identity=2728 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-sync-xkhth subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.131 56b66cf5-73af-4764-847a-e6319209f974 default }" containerID=255bccd82061a6192d11b0d0de237e37832214d0259ffa88b35d0c490aa0e762 datapathConfiguration="&{false false false false false }" interface=lxcb4be5b2ca8fd k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2dhqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=255bccd820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2dhqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=255bccd820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2dhqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=255bccd820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=59210 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2dhqb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=255bccd820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=59210 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2dhqb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=255bccd820 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1316 identity=59210 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2dhqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=255bccd820 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1316 identity=59210 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2dhqb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.147 e11b6156-234d-4a87-94e4-53af86ce501c default }" containerID=ceb6c60284bbdaf5ae779327e03d09f697d14c6fc7ff7469a952e1affde46e26 datapathConfiguration="&{false false false false false }" interface=lxcaf41cc4f1e57 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5wt8z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ceb6c60284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5wt8z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ceb6c60284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5wt8z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ceb6c60284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identity=22657 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5wt8z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ceb6c60284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identity=22657 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5wt8z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ceb6c60284 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=773 identity=22657 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5wt8z subsys=endpoint level=info msg="Successful endpoint creation" containerID=ceb6c60284 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=773 identity=22657 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5wt8z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=45d01f2fc8 endpointID=3759 k8sNamespace=openstack k8sPodName=glance-db-sync-xkhth subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e501e31c-e7a1-446c-b30a-f825c16782c6 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=e501e31c-e7a1-446c-b30a-f825c16782c6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=45d01f2fc8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3759 identity=2728 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-sync-xkhth subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 a1803159-19ab-4ee8-b446-1c8fa9979252 default }" containerID=7f1c76536727e1e06e6755374587f638ea48545e41bc41031854d30147e9c861 datapathConfiguration="&{false false false false false }" interface=lxc62ad71836bd2 k8sPodName=openstack/glance-rabbit-init-5fcj2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f1c765367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-rabbit-init-5fcj2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f1c765367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=596c6bad-3c64-4346-85b0-f191ea13a2ee,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=596c6bad-3c64-4346-85b0-f191ea13a2ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-rabbit-init-5fcj2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=596c6bad-3c64-4346-85b0-f191ea13a2ee;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=596c6bad-3c64-4346-85b0-f191ea13a2ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f1c765367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identity=53464 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=596c6bad-3c64-4346-85b0-f191ea13a2ee,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=596c6bad-3c64-4346-85b0-f191ea13a2ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-rabbit-init-5fcj2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f1c765367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identity=53464 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-rabbit-init-5fcj2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7f1c765367 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=906 identity=53464 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-rabbit-init-5fcj2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f1c765367 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=906 identity=53464 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-rabbit-init-5fcj2 subsys=daemon level=info msg="Delete endpoint request" containerID=7f1c765367 endpointID=906 k8sNamespace=openstack k8sPodName=glance-rabbit-init-5fcj2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=596c6bad-3c64-4346-85b0-f191ea13a2ee k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=596c6bad-3c64-4346-85b0-f191ea13a2ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7f1c765367 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=906 identity=53464 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-rabbit-init-5fcj2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 7c490c78-967f-42c7-b436-4bd64934083b default }" containerID=7273b20c4007c06568a686d9fa6a9ab87e765ed5d5773ea1af6757c6f81e2986 datapathConfiguration="&{false false false false false }" interface=lxc9111c8c7a5d1 k8sPodName=openstack/glance-ks-service-cj8dh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7273b20c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-ks-service-cj8dh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7273b20c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fb32286f-200c-4602-b9c6-4105b10c024a,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=fb32286f-200c-4602-b9c6-4105b10c024a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-ks-service-cj8dh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fb32286f-200c-4602-b9c6-4105b10c024a;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=fb32286f-200c-4602-b9c6-4105b10c024a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7273b20c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=58138 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fb32286f-200c-4602-b9c6-4105b10c024a,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=fb32286f-200c-4602-b9c6-4105b10c024a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-ks-service-cj8dh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7273b20c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=58138 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-ks-service-cj8dh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7273b20c40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=21 identity=58138 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-ks-service-cj8dh subsys=endpoint level=info msg="Successful endpoint creation" containerID=7273b20c40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=21 identity=58138 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-ks-service-cj8dh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7273b20c40 endpointID=21 k8sNamespace=openstack k8sPodName=glance-ks-service-cj8dh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fb32286f-200c-4602-b9c6-4105b10c024a k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=fb32286f-200c-4602-b9c6-4105b10c024a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7273b20c40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=21 identity=58138 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-ks-service-cj8dh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 7dd9a1fb-7594-43cc-8b5c-c1a86809ed06 default }" containerID=a3b0955d62dd17e8013e7c314f1e657ec8db76a3f0113d96307b9def150fc485 datapathConfiguration="&{false false false false false }" interface=lxc0e5d88d33c9c k8sPodName=openstack/glance-ks-endpoints-55mvx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3b0955d62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-ks-endpoints-55mvx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3b0955d62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=db9d6775-8367-44ab-804a-a01d0d7a6291,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=db9d6775-8367-44ab-804a-a01d0d7a6291,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-ks-endpoints-55mvx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=db9d6775-8367-44ab-804a-a01d0d7a6291;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=db9d6775-8367-44ab-804a-a01d0d7a6291;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3b0955d62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 identity=36941 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=db9d6775-8367-44ab-804a-a01d0d7a6291,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=db9d6775-8367-44ab-804a-a01d0d7a6291,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-ks-endpoints-55mvx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3b0955d62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 identity=36941 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-ks-endpoints-55mvx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a3b0955d62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=685 identity=36941 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-ks-endpoints-55mvx subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3b0955d62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=685 identity=36941 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-ks-endpoints-55mvx subsys=daemon level=info msg="Delete endpoint request" containerID=a3b0955d62 endpointID=685 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-55mvx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=db9d6775-8367-44ab-804a-a01d0d7a6291 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=db9d6775-8367-44ab-804a-a01d0d7a6291 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a3b0955d62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=685 identity=36941 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-ks-endpoints-55mvx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 ecc98fef-8adf-448f-af5f-f71ea29c8c97 default }" containerID=9b3d453437e25c66db004278a966debf53610fc4556dbd787196cccac53e0c17 datapathConfiguration="&{false false false false false }" interface=lxcde57ab818017 k8sPodName=openstack/glance-ks-user-dkjtp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b3d453437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-ks-user-dkjtp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b3d453437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fce1b3ae-1b67-4a07-9e66-6bfe938a1bc5,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=fce1b3ae-1b67-4a07-9e66-6bfe938a1bc5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-ks-user-dkjtp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fce1b3ae-1b67-4a07-9e66-6bfe938a1bc5;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=fce1b3ae-1b67-4a07-9e66-6bfe938a1bc5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b3d453437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 identity=11571 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fce1b3ae-1b67-4a07-9e66-6bfe938a1bc5,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=fce1b3ae-1b67-4a07-9e66-6bfe938a1bc5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-ks-user-dkjtp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b3d453437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 identity=11571 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-ks-user-dkjtp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9b3d453437 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=408 identity=11571 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-ks-user-dkjtp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b3d453437 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=408 identity=11571 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-ks-user-dkjtp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9b3d453437 endpointID=408 k8sNamespace=openstack k8sPodName=glance-ks-user-dkjtp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fce1b3ae-1b67-4a07-9e66-6bfe938a1bc5 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=fce1b3ae-1b67-4a07-9e66-6bfe938a1bc5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9b3d453437 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=408 identity=11571 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-ks-user-dkjtp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 a31e7787-1352-4b36-b7b8-615698c540a9 default }" containerID=8f0885e294e6f412479ad2ea920d4f705e0a54132863b6347acbcac101f4ed07 datapathConfiguration="&{false false false false false }" interface=lxc1c93c2722d2a k8sPodName=openstack/glance-metadefs-load-jt6br labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f0885e294 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-metadefs-load-jt6br subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f0885e294 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1aa1e3e5-e2b7-4266-bf44-99a2f30f07fd,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=1aa1e3e5-e2b7-4266-bf44-99a2f30f07fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-metadefs-load-jt6br subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8f0885e294 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-metadefs-load-jt6br line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1aa1e3e5-e2b7-4266-bf44-99a2f30f07fd;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=1aa1e3e5-e2b7-4266-bf44-99a2f30f07fd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f0885e294 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=37390 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1aa1e3e5-e2b7-4266-bf44-99a2f30f07fd,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=1aa1e3e5-e2b7-4266-bf44-99a2f30f07fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-metadefs-load-jt6br oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f0885e294 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=37390 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-metadefs-load-jt6br subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f0885e294 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=27 identity=37390 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-metadefs-load-jt6br subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f0885e294 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=27 identity=37390 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-metadefs-load-jt6br subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8f0885e294 endpointID=27 k8sNamespace=openstack k8sPodName=glance-metadefs-load-jt6br subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1aa1e3e5-e2b7-4266-bf44-99a2f30f07fd k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=1aa1e3e5-e2b7-4266-bf44-99a2f30f07fd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8f0885e294 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=27 identity=37390 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-metadefs-load-jt6br subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 f4143e9a-a64b-42a2-84fc-0a4935d4848d default }" containerID=193be9d8e150956b90927cd450a0a733a8d0d4edb24fb2b28db32dc342651769 datapathConfiguration="&{false false false false false }" interface=lxcfc71e9b1c45f k8sPodName=openstack/glance-storage-init-m66wc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=193be9d8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=160 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-storage-init-m66wc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=193be9d8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=160 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=833d2892-e7c6-405f-b9f4-6f80d4115495,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=833d2892-e7c6-405f-b9f4-6f80d4115495,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-storage-init-m66wc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=193be9d8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=160 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-storage-init-m66wc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=833d2892-e7c6-405f-b9f4-6f80d4115495;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=833d2892-e7c6-405f-b9f4-6f80d4115495;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=193be9d8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=160 identity=37553 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=833d2892-e7c6-405f-b9f4-6f80d4115495,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=833d2892-e7c6-405f-b9f4-6f80d4115495,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-storage-init-m66wc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=193be9d8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=160 identity=37553 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-storage-init-m66wc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=193be9d8e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=160 identity=37553 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-storage-init-m66wc subsys=endpoint level=info msg="Successful endpoint creation" containerID=193be9d8e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=160 identity=37553 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-storage-init-m66wc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=193be9d8e1 endpointID=160 k8sNamespace=openstack k8sPodName=glance-storage-init-m66wc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=833d2892-e7c6-405f-b9f4-6f80d4115495 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=833d2892-e7c6-405f-b9f4-6f80d4115495 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=193be9d8e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=160 identity=37553 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-storage-init-m66wc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 60b08050-63b4-4cff-9159-58792a2dd308 default }" containerID=7c9173bc767e30ab07d5db0463035d437b049eabdc3e61a83b4f249048327a08 datapathConfiguration="&{false false false false false }" interface=lxce0ad1a3c8699 k8sPodName=openstack/glance-api-69f9c5fcdb-5glrx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c9173bc76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-api-69f9c5fcdb-5glrx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c9173bc76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-api-69f9c5fcdb-5glrx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c9173bc76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 identity=65246 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-api-69f9c5fcdb-5glrx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7c9173bc76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 identity=65246 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-api-69f9c5fcdb-5glrx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c9173bc76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1546 identity=65246 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-api-69f9c5fcdb-5glrx subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c9173bc76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1546 identity=65246 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-api-69f9c5fcdb-5glrx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.15 a691c75c-a49e-404a-b494-c87764843d9d default }" containerID=799aa39d84a4af0863e12bbc0a9707dc5cbb019ecebb7e98aea0ea1174618332 datapathConfiguration="&{false false false false false }" interface=lxc6168e6d8493f k8sPodName=openstack/staffeln-conductor-6f484964df-wj4wg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=799aa39d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-conductor-6f484964df-wj4wg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=799aa39d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-conductor-6f484964df-wj4wg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=799aa39d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-conductor-6f484964df-wj4wg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=799aa39d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identity=25776 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-conductor-6f484964df-wj4wg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=799aa39d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identity=25776 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-conductor-6f484964df-wj4wg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 1769b13a-bdb3-44a5-8b46-a492565a580b default }" containerID=10086e0e5723269ae62084717aadd970671cff8155f8e6dec26ed1a2b941d620 datapathConfiguration="&{false false false false false }" interface=lxc54c08230dddb k8sPodName=openstack/staffeln-api-575b65595d-xsk7p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10086e0e57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-api-575b65595d-xsk7p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10086e0e57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-api-575b65595d-xsk7p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10086e0e57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=30454 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-api-575b65595d-xsk7p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10086e0e57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=30454 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-api-575b65595d-xsk7p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=799aa39d84 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1584 identity=25776 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-conductor-6f484964df-wj4wg subsys=endpoint level=info msg="Successful endpoint creation" containerID=799aa39d84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1584 identity=25776 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-conductor-6f484964df-wj4wg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.179 89f12cea-2372-4c2f-a1ce-01c9aadddbe1 default }" containerID=2c51ff2f677d46d7cca5de141d2de0c583dbee9738e3023d5bc96497f55f8445 datapathConfiguration="&{false false false false false }" interface=lxcc9b148c24d11 k8sPodName=openstack/staffeln-db-init-rhzxv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c51ff2f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-db-init-rhzxv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c51ff2f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6e6af5ec-3ec0-4b54-98ed-75f8d0970e34,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=6e6af5ec-3ec0-4b54-98ed-75f8d0970e34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-db-init-rhzxv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=6e6af5ec-3ec0-4b54-98ed-75f8d0970e34;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=6e6af5ec-3ec0-4b54-98ed-75f8d0970e34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c51ff2f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identity=7307 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6e6af5ec-3ec0-4b54-98ed-75f8d0970e34,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=6e6af5ec-3ec0-4b54-98ed-75f8d0970e34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-db-init-rhzxv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c51ff2f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identity=7307 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-db-init-rhzxv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10086e0e57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=285 identity=30454 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-api-575b65595d-xsk7p subsys=endpoint level=info msg="Successful endpoint creation" containerID=10086e0e57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=285 identity=30454 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-api-575b65595d-xsk7p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2c51ff2f67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2211 identity=7307 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-db-init-rhzxv subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c51ff2f67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2211 identity=7307 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-db-init-rhzxv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2c51ff2f67 endpointID=2211 k8sNamespace=openstack k8sPodName=staffeln-db-init-rhzxv subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=6e6af5ec-3ec0-4b54-98ed-75f8d0970e34 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=6e6af5ec-3ec0-4b54-98ed-75f8d0970e34 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=2c51ff2f67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2211 identity=7307 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-db-init-rhzxv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 a159d9ad-a6dd-45af-8bc3-142688ca6c79 default }" containerID=565125bc54cb21f0a4c364c8f2dea58fcd3a87e69204632359c0caf77e9e8cc3 datapathConfiguration="&{false false false false false }" interface=lxc043d447fc0d4 k8sPodName=openstack/staffeln-db-sync-8r2tk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=565125bc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3475 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-db-sync-8r2tk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=565125bc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3475 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=558d3658-4e88-4579-91eb-1d4437d5b659,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=558d3658-4e88-4579-91eb-1d4437d5b659,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-db-sync-8r2tk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=558d3658-4e88-4579-91eb-1d4437d5b659;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=558d3658-4e88-4579-91eb-1d4437d5b659;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=565125bc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3475 identity=3153 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=558d3658-4e88-4579-91eb-1d4437d5b659,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=558d3658-4e88-4579-91eb-1d4437d5b659,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-db-sync-8r2tk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=565125bc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3475 identity=3153 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-db-sync-8r2tk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=565125bc54 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3475 identity=3153 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-db-sync-8r2tk subsys=endpoint level=info msg="Successful endpoint creation" containerID=565125bc54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3475 identity=3153 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-db-sync-8r2tk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager