level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.042491ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="59.631µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.05081ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.87µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=97.041629ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="8.761µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="12.63µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="54.371µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="47.47µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="59.371µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="446.449µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.86µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.894909ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.667193ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="32.691µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="41.061µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="250.005µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="104.072µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="79.641µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=42.921141ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="119.592µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="40.461µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.13µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.62.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.013778ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.761254ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="144.692µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.287233ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.66µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="50.891µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="12.32µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="36.29µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="281.295µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="13.891µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="220.694µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="795.936µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.218645ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.73µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="16.901µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.62 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.62 ipAddr.ipv6="" k8sNodeIP=162.253.55.62 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.62" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.4" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.62" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.62} {CiliumInternalIP 10.0.0.4}] 10.0.0.0/24 [] [] 10.0.0.204 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40009" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.456928516s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="11.94µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.67µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="46.291µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="3.01µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2343 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2343 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2343 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.407509579s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.187 fefbe815-09d4-472d-a78e-64ba2d41ee45 default }" containerID=9021b440e96cf1eaef3d762b2dba61d5dbb6c25fc8b69bc769bec83ced128375 datapathConfiguration="&{false false false false false }" interface=lxcaf2a38f5d7bf k8sPodName=kube-system/coredns-7c96b6546b-qrf7r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9021b440e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1338 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qrf7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9021b440e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1338 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qrf7r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 5af17bdc-a512-4c28-bc0e-7a720ac39b52 default }" containerID=89577a58e52c566f18a9a4d1a1aba9060446b50e44c51b06f26a1e25f4918a45 datapathConfiguration="&{false false false false false }" interface=lxc8ac411e7a600 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tn54r labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="New endpoint" containerID=89577a58e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3185 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tn54r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89577a58e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3185 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=155ad042-4755-4cd9-a6a6-a235ceff94db,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=155ad042-4755-4cd9-a6a6-a235ceff94db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tn54r subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9021b440e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1338 identity=11058 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qrf7r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9021b440e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1338 identity=11058 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qrf7r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=89577a58e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3185 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tn54r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=155ad042-4755-4cd9-a6a6-a235ceff94db;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=155ad042-4755-4cd9-a6a6-a235ceff94db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89577a58e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3185 identity=59907 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=155ad042-4755-4cd9-a6a6-a235ceff94db,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=155ad042-4755-4cd9-a6a6-a235ceff94db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tn54r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89577a58e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3185 identity=59907 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tn54r subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=295.815338ms file-path=/var/run/cilium/state/templates/fc274334a5b3e2f4a6fd11da80b265e606dbc44cbd110b93dd9b60004d00d1ec/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2343 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3546 ipv4=10.0.0.204 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3546 identityLabels="reserved:health" ipv4=10.0.0.204 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3546 identity=4 identityLabels="reserved:health" ipv4=10.0.0.204 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.048091381s file-path=/var/run/cilium/state/templates/86ad03f6739a58a309117cd9c6598f1839eb6903d8a948de589d06574b56228f/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3546 identity=4 ipv4=10.0.0.204 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89577a58e5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3185 identity=59907 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tn54r subsys=endpoint level=info msg="Successful endpoint creation" containerID=89577a58e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3185 identity=59907 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tn54r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9021b440e9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1338 identity=11058 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qrf7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=9021b440e9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1338 identity=11058 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qrf7r subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=89577a58e5 endpointID=3185 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-tn54r subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=155ad042-4755-4cd9-a6a6-a235ceff94db k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=155ad042-4755-4cd9-a6a6-a235ceff94db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=89577a58e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3185 identity=59907 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tn54r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 f84c92e0-65b5-4ebc-b1c8-592c566ff8bd default }" containerID=7bda026d1af013de0c62e3956a417ec0a864a33d6827d855f0a7961ebfe2b6c8 datapathConfiguration="&{false false false false false }" interface=lxc557e1b7baf3c k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cjjtf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7bda026d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 ipv4=10.0.0.153 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cjjtf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7bda026d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.153 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cjjtf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7bda026d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.153 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cjjtf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7bda026d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identity=42985 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.153 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cjjtf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7bda026d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identity=42985 ipv4=10.0.0.153 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cjjtf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7bda026d1a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1252 identity=42985 ipv4=10.0.0.153 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cjjtf subsys=endpoint level=info msg="Successful endpoint creation" containerID=7bda026d1a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1252 identity=42985 ipv4=10.0.0.153 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cjjtf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2343 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02343 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02343 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02343 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02343:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2343 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 a5d5da35-b4dc-4604-b62e-e8cad96a9327 default }" containerID=aed796fac7cf9fa2b9136e9a6615a7cda3796f09f31abd726f3db263f871a247 datapathConfiguration="&{false false false false false }" interface=lxcc8fd3c082be5 k8sPodName=kube-system/coredns-67659f764b-xh555 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aed796fac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=136 ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-xh555 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aed796fac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=136 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-xh555 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=aed796fac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=136 identity=11058 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-xh555 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aed796fac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=136 identity=11058 ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-xh555 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aed796fac7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=136 identity=11058 ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-xh555 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aed796fac7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=136 identity=11058 ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-xh555 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.212 73c4f1d2-0911-4f2a-927b-9ba7053c5d9b default }" containerID=cb79edbd82b24e28359a63276a86a901ded1d81d866ba45ad2f1b25adcace6db datapathConfiguration="&{false false false false false }" interface=lxcb5529e1d15cb k8sPodName=kube-system/coredns-67659f764b-h4rbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb79edbd82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 ipv4=10.0.0.212 ipv6= k8sPodName=kube-system/coredns-67659f764b-h4rbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb79edbd82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.212 ipv6= k8sPodName=kube-system/coredns-67659f764b-h4rbb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cb79edbd82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identity=11058 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.212 ipv6= k8sPodName=kube-system/coredns-67659f764b-h4rbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb79edbd82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identity=11058 ipv4=10.0.0.212 ipv6= k8sPodName=kube-system/coredns-67659f764b-h4rbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb79edbd82 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3818 identity=11058 ipv4=10.0.0.212 ipv6= k8sPodName=kube-system/coredns-67659f764b-h4rbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb79edbd82 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3818 identity=11058 ipv4=10.0.0.212 ipv6= k8sPodName=kube-system/coredns-67659f764b-h4rbb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.36 688709fd-e70e-4930-a144-f3c947471dd9 default }" containerID=c2c435d672c74fefdf6dfcb92c22c8e11461dd3815a36e66848d4533fd1b7c16 datapathConfiguration="&{false false false false false }" interface=lxc48760165445c k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w9bmw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2c435d672 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2958 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w9bmw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2c435d672 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2958 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w9bmw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2c435d672 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2958 identity=34604 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w9bmw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c2c435d672 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2958 identity=34604 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w9bmw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c2c435d672 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2958 identity=34604 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w9bmw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2c435d672 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2958 identity=34604 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w9bmw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9021b440e9 endpointID=1338 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-qrf7r subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=9021b440e9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1338 identity=11058 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qrf7r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 051acc16-3e67-46b2-a334-d064d019029a default }" containerID=fe0dc3cec1d3304c747a11f0b7ca4f9c1961d599c8f45874036fd63958f0c11f datapathConfiguration="&{false false false false false }" interface=lxca6e2745ef297 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-z4wmz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe0dc3cec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-z4wmz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe0dc3cec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-z4wmz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fe0dc3cec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 identity=30342 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-z4wmz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe0dc3cec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 identity=30342 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-z4wmz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe0dc3cec1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=430 identity=30342 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-z4wmz subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe0dc3cec1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=430 identity=30342 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-z4wmz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.45 2a48642c-b79c-4146-a726-05255a054d76 default }" containerID=e0238dcc30bd71b874726c2f384806b7e2f4aa3120c045b86bbf5d9c86cfc63e datapathConfiguration="&{false false false false false }" interface=lxc188673d40222 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-dkj7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0238dcc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1019 ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-dkj7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0238dcc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1019 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-dkj7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.28 6be225f1-fb99-42a4-b7cc-1f385f5781db default }" containerID=ac40cb0be4fa3ec9df0d6987ff809428c361b75efb50219a63aac3de5dd758f5 datapathConfiguration="&{false false false false false }" interface=lxcf1b307923daa k8sPodName=cert-manager/cert-manager-75c4c745bc-8969w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac40cb0be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2954 ipv4=10.0.0.28 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8969w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac40cb0be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2954 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.28 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8969w subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0238dcc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1019 identity=51839 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-dkj7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0238dcc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1019 identity=51839 ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-dkj7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac40cb0be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2954 identity=32676 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.28 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8969w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac40cb0be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2954 identity=32676 ipv4=10.0.0.28 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8969w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e0238dcc30 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1019 identity=51839 ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-dkj7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0238dcc30 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1019 identity=51839 ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-dkj7b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ac40cb0be4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2954 identity=32676 ipv4=10.0.0.28 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8969w subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac40cb0be4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2954 identity=32676 ipv4=10.0.0.28 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8969w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.169 417c99a4-acf5-42a9-a4ec-d6d318004179 default }" containerID=76dae1b477aa2bd7c48ab8f754de3cf45cb9de5bd5f42b9db320a29539448232 datapathConfiguration="&{false false false false false }" interface=lxcd8a8a6ed517c k8sPodName=cert-manager/cert-manager-startupapicheck-9p8kc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76dae1b477 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9p8kc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76dae1b477 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=ea17838a-257a-4520-bf83-7da9d76750bb,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=ea17838a-257a-4520-bf83-7da9d76750bb,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9p8kc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=ea17838a-257a-4520-bf83-7da9d76750bb;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=ea17838a-257a-4520-bf83-7da9d76750bb;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76dae1b477 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 identity=49440 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=ea17838a-257a-4520-bf83-7da9d76750bb,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=ea17838a-257a-4520-bf83-7da9d76750bb,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9p8kc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76dae1b477 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 identity=49440 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9p8kc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76dae1b477 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3703 identity=49440 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9p8kc subsys=endpoint level=info msg="Successful endpoint creation" containerID=76dae1b477 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3703 identity=49440 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9p8kc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=76dae1b477 endpointID=3703 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-9p8kc subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=ea17838a-257a-4520-bf83-7da9d76750bb k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=ea17838a-257a-4520-bf83-7da9d76750bb k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=76dae1b477 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3703 identity=49440 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9p8kc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 ae4c1cd2-63e5-44e1-8d5c-0c08f65186eb default }" containerID=cb7135e20161c9e8e6061d8e2ba2ba7ec5c257ec4f3d6ddef471afd2be917f89 datapathConfiguration="&{false false false false false }" interface=lxcb212434f45e0 k8sPodName=ingress-nginx/ingress-nginx-admission-create-dfrxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb7135e201 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dfrxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb7135e201 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=39fa7593-d381-44df-858d-ee1e09a8c380,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=39fa7593-d381-44df-858d-ee1e09a8c380,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dfrxf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=39fa7593-d381-44df-858d-ee1e09a8c380;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=39fa7593-d381-44df-858d-ee1e09a8c380;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb7135e201 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identity=60671 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=39fa7593-d381-44df-858d-ee1e09a8c380,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=39fa7593-d381-44df-858d-ee1e09a8c380,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dfrxf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cb7135e201 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identity=60671 ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dfrxf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb7135e201 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=980 identity=60671 ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dfrxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb7135e201 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=980 identity=60671 ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dfrxf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cb7135e201 endpointID=980 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-dfrxf subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=39fa7593-d381-44df-858d-ee1e09a8c380 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=39fa7593-d381-44df-858d-ee1e09a8c380 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=cb7135e201 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=980 identity=60671 ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dfrxf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 b9636904-9f37-459b-8e55-86d058aef8b5 default }" containerID=e1d9562f5144d6e32e8d5ec961c3d994e353f2c7d6e739e8e63c06584987a09f datapathConfiguration="&{false false false false false }" interface=lxc1904a7882393 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2vt2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1d9562f51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2vt2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1d9562f51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2vt2b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1d9562f51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 identity=11070 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2vt2b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1d9562f51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 identity=11070 ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2vt2b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e1d9562f51 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1374 identity=11070 ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2vt2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1d9562f51 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1374 identity=11070 ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2vt2b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.66 48a56286-19ae-421d-9c8c-a20cd4e95814 default }" containerID=317d834cce4205e53595d89b400a741d1d70f62cc94cf233aac89433ba3952b3 datapathConfiguration="&{false false false false false }" interface=lxcaa1913f78b1b k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fhvrl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=317d834cce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 ipv4=10.0.0.66 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fhvrl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=317d834cce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c9f95bea-40e5-4480-9eb4-a265b2b65f48,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=c9f95bea-40e5-4480-9eb4-a265b2b65f48,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.66 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fhvrl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c9f95bea-40e5-4480-9eb4-a265b2b65f48;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=c9f95bea-40e5-4480-9eb4-a265b2b65f48;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=317d834cce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 identity=7212 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c9f95bea-40e5-4480-9eb4-a265b2b65f48,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=c9f95bea-40e5-4480-9eb4-a265b2b65f48,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.66 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fhvrl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=317d834cce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 identity=7212 ipv4=10.0.0.66 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fhvrl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=317d834cce datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=775 identity=7212 ipv4=10.0.0.66 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fhvrl subsys=endpoint level=info msg="Successful endpoint creation" containerID=317d834cce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=775 identity=7212 ipv4=10.0.0.66 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fhvrl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=317d834cce endpointID=775 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-fhvrl subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c9f95bea-40e5-4480-9eb4-a265b2b65f48 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=c9f95bea-40e5-4480-9eb4-a265b2b65f48 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=317d834cce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=775 identity=7212 ipv4=10.0.0.66 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fhvrl subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=180f06fa-403b-485a-b922-9f69805f4e32] Description:}]" policyAddRequest=c84f6a81-870e-4db3-8bba-94b04fd672c1 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c84f6a81-870e-4db3-8bba-94b04fd672c1 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c8e96933-fce8-4c05-9515-b3b09e39f313] Description:}]" policyAddRequest=ee3a6927-e1dc-400f-b613-d0be19ef5d0e subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=ee3a6927-e1dc-400f-b613-d0be19ef5d0e policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.114 1edb8a81-a763-4346-9fd5-162244b11550 default }" containerID=7be7055b4f5a1e69bbdf3d26821299dd1ce5965f7a93dd9c7e929a604ea61c06 datapathConfiguration="&{false false false false false }" interface=lxc75ce6a9384e4 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-fnplp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7be7055b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2148 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-fnplp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7be7055b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2148 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-fnplp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7be7055b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2148 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-fnplp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7be7055b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2148 identity=46186 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-fnplp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7be7055b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2148 identity=46186 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-fnplp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7be7055b4f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2148 identity=46186 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-fnplp subsys=endpoint level=info msg="Successful endpoint creation" containerID=7be7055b4f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2148 identity=46186 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-fnplp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.137 2abc4d29-8ebf-4f8f-bd8e-4cdc6d510a49 default }" containerID=c002f723df1c863478b9a09295ee6b3699e74075bfbdb9c34c5fc90c1b917043 datapathConfiguration="&{false false false false false }" interface=lxcf81d5add9221 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-5m5hv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c002f723df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3089 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-5m5hv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c002f723df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3089 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-5m5hv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c002f723df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3089 identity=31166 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-5m5hv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c002f723df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3089 identity=31166 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-5m5hv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c002f723df datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3089 identity=31166 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-5m5hv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c002f723df datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3089 identity=31166 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-5m5hv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.173 c1e470c7-146f-4ad9-9c3a-ee3c46951c7a default }" containerID=5e831c85b9dc30dc4fa76d2027a00dde9dfbf0b486ce2ff3d130cac19e174e76 datapathConfiguration="&{false false false false false }" interface=lxc6dd8e5440b19 k8sPodName=openstack/pxc-operator-69cb5bbdb9-bfftt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e831c85b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4071 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bfftt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e831c85b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4071 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bfftt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e831c85b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4071 identity=32952 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bfftt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5e831c85b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4071 identity=32952 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bfftt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e831c85b9 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=4071 identity=32952 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bfftt subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e831c85b9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=4071 identity=32952 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bfftt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.40 7fbde228-fb65-4e09-a80c-b6444cb5e031 default }" containerID=176b0ce98f6804c7f9004e0686570f61f73dc0a032b06e2b67cc36c2f0a9db21 datapathConfiguration="&{false false false false false }" interface=lxc5cf68ac0bc90 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=176b0ce98f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=176b0ce98f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=176b0ce98f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.40 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=176b0ce98f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 identity=6026 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=176b0ce98f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 identity=6026 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=176b0ce98f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1758 identity=6026 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=176b0ce98f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1758 identity=6026 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.67 28d3c662-6a2d-4d79-9b3a-e9c282afd909 default }" containerID=bcc9336ff7ca71449d87ff660653d797fa96aff7d9d6c0ae690c9ce9fe554369 datapathConfiguration="&{false false false false false }" interface=lxc22962f78f250 k8sPodName=local-path-storage/helper-pod-create-pvc-6507a948-a66c-4058-be86-579993081e7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcc9336ff7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6507a948-a66c-4058-be86-579993081e7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcc9336ff7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6507a948-a66c-4058-be86-579993081e7d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bcc9336ff7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identity=20494 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6507a948-a66c-4058-be86-579993081e7d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bcc9336ff7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identity=20494 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6507a948-a66c-4058-be86-579993081e7d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bcc9336ff7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=499 identity=20494 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6507a948-a66c-4058-be86-579993081e7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcc9336ff7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=499 identity=20494 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6507a948-a66c-4058-be86-579993081e7d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bcc9336ff7 endpointID=499 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6507a948-a66c-4058-be86-579993081e7d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bcc9336ff7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=499 identity=20494 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6507a948-a66c-4058-be86-579993081e7d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 0ed8ca2c-7b19-4d7b-9116-696f1b566e99 default }" containerID=41734e74806d59f2b05b5c96facfcfb51695228131c4ff2643739d192ef819f4 datapathConfiguration="&{false false false false false }" interface=lxcd983b23a707d k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41734e7480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41734e7480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=41734e7480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.117 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41734e7480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 identity=63366 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41734e7480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 identity=63366 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41734e7480 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3964 identity=63366 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=41734e7480 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3964 identity=63366 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=035d771b-0873-4a0e-ba0f-1de5b3f04f93] Description:}]" policyAddRequest=c6e3e47f-f2c6-481b-ac2d-6a80a7b9d4ef subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c6e3e47f-f2c6-481b-ac2d-6a80a7b9d4ef policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.85 f0d104ab-5f70-49a1-9b49-f6959e447f8a default }" containerID=e4d4ef482563884bd575b7a5bb57557dee86fdce68ed2683b013fd51f84064a4 datapathConfiguration="&{false false false false false }" interface=lxcb2433a0f3e32 k8sPodName=local-path-storage/helper-pod-create-pvc-390da0c1-5fe1-492a-8fce-a28082acfd3d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4d4ef4825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-390da0c1-5fe1-492a-8fce-a28082acfd3d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4d4ef4825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-390da0c1-5fe1-492a-8fce-a28082acfd3d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4d4ef4825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=20494 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-390da0c1-5fe1-492a-8fce-a28082acfd3d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4d4ef4825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=20494 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-390da0c1-5fe1-492a-8fce-a28082acfd3d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4d4ef4825 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=82 identity=20494 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-390da0c1-5fe1-492a-8fce-a28082acfd3d subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4d4ef4825 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=82 identity=20494 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-390da0c1-5fe1-492a-8fce-a28082acfd3d subsys=daemon level=info msg="Delete endpoint request" containerID=e4d4ef4825 endpointID=82 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-390da0c1-5fe1-492a-8fce-a28082acfd3d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e4d4ef4825 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=82 identity=20494 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-390da0c1-5fe1-492a-8fce-a28082acfd3d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 dffdf59e-faa1-4105-84d3-7a67d14b45e5 default }" containerID=a953ba11cecb084bac1e07667771de595958d4397766f299c70a2d1bc1b7f25e datapathConfiguration="&{false false false false false }" interface=lxc0b4f73e73674 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a953ba11ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a953ba11ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a953ba11ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identity=36605 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a953ba11ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identity=36605 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a953ba11ce datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=159 identity=36605 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a953ba11ce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=159 identity=36605 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=034cbdc3-03bf-4e3f-93cc-b8007284d3b8] Description:}]" policyAddRequest=2ba5ff97-75f8-4abd-9c20-a2994bebb3c8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=2ba5ff97-75f8-4abd-9c20-a2994bebb3c8 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.134 ddf6daa9-196d-4584-b19f-93866def1570 default }" containerID=700417506a0f1ba104dbcd55af012cfa878980f74862c8699a7399b409b3ca92 datapathConfiguration="&{false false false false false }" interface=lxc5db704526a42 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=700417506a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3738 ipv4=10.0.0.134 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=700417506a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3738 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.134 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=700417506a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3738 identity=8903 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.134 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=700417506a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3738 identity=8903 ipv4=10.0.0.134 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=700417506a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3738 identity=8903 ipv4=10.0.0.134 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=700417506a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3738 identity=8903 ipv4=10.0.0.134 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00962435916512235 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.51 68c6da53-5efa-4ddb-89bc-de289fba4357 default }" containerID=3993826e6e9a1a717a8fe82a6e21603dbee337e4924034c81b898ea6254795e0 datapathConfiguration="&{false false false false false }" interface=lxcbf5455ae0d46 k8sPodName=monitoring/node-feature-discovery-worker-nrblt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3993826e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nrblt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3993826e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nrblt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.89 5ae60be2-0c9c-41f3-96e4-9f123464f96d default }" containerID=61c7bd42f19ba4e46e45068bc7df3396698854e2139a82203301630730e53b38 datapathConfiguration="&{false false false false false }" interface=lxc71cc00c6a521 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r8dnq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61c7bd42f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r8dnq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61c7bd42f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r8dnq subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=61c7bd42f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r8dnq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3993826e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identity=8633 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nrblt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3993826e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identity=8633 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nrblt subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61c7bd42f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=1022 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r8dnq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61c7bd42f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=1022 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r8dnq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 f2e93ff4-f1cb-46a7-821b-4427958f343b default }" containerID=b48a26f16a89806d581088b61a620da81417af37261061c9ed61bbc45f463146 datapathConfiguration="&{false false false false false }" interface=lxcc7aabcab841a k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7sckk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b48a26f16a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7sckk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b48a26f16a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7sckk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b48a26f16a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identity=46575 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7sckk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b48a26f16a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identity=46575 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7sckk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=61c7bd42f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1078 identity=1022 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r8dnq subsys=endpoint level=info msg="Successful endpoint creation" containerID=61c7bd42f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1078 identity=1022 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r8dnq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3993826e6e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1181 identity=8633 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nrblt subsys=endpoint level=info msg="Successful endpoint creation" containerID=3993826e6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1181 identity=8633 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nrblt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b48a26f16a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=409 identity=46575 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7sckk subsys=endpoint level=info msg="Successful endpoint creation" containerID=b48a26f16a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=409 identity=46575 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7sckk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.41 3a6f1954-e162-40c2-9919-dca3ed2106d1 default }" containerID=92414fdc8b6e2a0541b1688e328c8fbc2f1a3863f880bde045ddd7e6cab820b9 datapathConfiguration="&{false false false false false }" interface=lxc7dce8c5a7de5 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j5q7z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92414fdc8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 ipv4=10.0.0.41 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j5q7z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92414fdc8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.41 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j5q7z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92414fdc8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=6792 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.41 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j5q7z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92414fdc8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=6792 ipv4=10.0.0.41 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j5q7z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92414fdc8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=106 identity=6792 ipv4=10.0.0.41 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j5q7z subsys=endpoint level=info msg="Successful endpoint creation" containerID=92414fdc8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=106 identity=6792 ipv4=10.0.0.41 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j5q7z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2343 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02343 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02343 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02343 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02343:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2343 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 81cf8083-e4f0-4dae-b018-dd092b45e28e default }" containerID=19d27f115d27c3cb38dd376dff08ed1648bd2609750ffccb26230210f9a04c21 datapathConfiguration="&{false false false false false }" interface=lxccbeeb8aa14ca k8sPodName=monitoring/kube-prometheus-stack-admission-create-66d2x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19d27f115d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3396 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-66d2x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19d27f115d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3396 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=9c96cd48-f942-4148-9fd7-17bceb166ec9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9c96cd48-f942-4148-9fd7-17bceb166ec9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-66d2x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=9c96cd48-f942-4148-9fd7-17bceb166ec9;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=9c96cd48-f942-4148-9fd7-17bceb166ec9;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19d27f115d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3396 identity=6217 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=9c96cd48-f942-4148-9fd7-17bceb166ec9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9c96cd48-f942-4148-9fd7-17bceb166ec9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-66d2x oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=19d27f115d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3396 identity=6217 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-66d2x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19d27f115d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3396 identity=6217 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-66d2x subsys=endpoint level=info msg="Successful endpoint creation" containerID=19d27f115d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3396 identity=6217 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-66d2x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=19d27f115d endpointID=3396 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-66d2x subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=9c96cd48-f942-4148-9fd7-17bceb166ec9 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=9c96cd48-f942-4148-9fd7-17bceb166ec9 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=19d27f115d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3396 identity=6217 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-66d2x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 e2d6f721-9a4d-4f71-a3e2-2707e3d85783 default }" containerID=0babdc103e8b49ebfe1949a3e34b851719bbb50163602d0907169962f91c12fa datapathConfiguration="&{false false false false false }" interface=lxc055bab0a91a8 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-49vpx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0babdc103e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1040 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-49vpx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0babdc103e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1040 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-49vpx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.195 ffb48b2d-a592-4444-8f6e-15317f5a1bf8 default }" containerID=46479974cdb1edf0c3f8fc94b77dcac45935e308b63ef3f0126893fab0ef9a56 datapathConfiguration="&{false false false false false }" interface=lxcf0ac65f43609 k8sPodName=monitoring/kube-prometheus-stack-grafana-694b6ddb59-tst7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46479974cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3390 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-694b6ddb59-tst7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46479974cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3390 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-694b6ddb59-tst7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 75527e82-c51f-47df-9acf-3b9fa7a79c55 default }" containerID=b6befd6c8cdd7a973e62f21594b345f9200e667bed8042a0dbe0dbb15a36b96a datapathConfiguration="&{false false false false false }" interface=lxc29f0965e9dcb k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kkgbl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6befd6c8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kkgbl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6befd6c8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kkgbl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b6befd6c8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kkgbl line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=46479974cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3390 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-694b6ddb59-tst7f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0babdc103e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1040 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-49vpx line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0babdc103e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1040 identity=32624 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-49vpx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0babdc103e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1040 identity=32624 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-49vpx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46479974cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3390 identity=37253 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-694b6ddb59-tst7f oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=46479974cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3390 identity=37253 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-694b6ddb59-tst7f subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6befd6c8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=9757 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kkgbl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6befd6c8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=9757 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kkgbl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0babdc103e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1040 identity=32624 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-49vpx subsys=endpoint level=info msg="Successful endpoint creation" containerID=0babdc103e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1040 identity=32624 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-49vpx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=46479974cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3390 identity=37253 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-694b6ddb59-tst7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=46479974cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3390 identity=37253 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-694b6ddb59-tst7f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b6befd6c8c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=891 identity=9757 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kkgbl subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6befd6c8c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=891 identity=9757 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kkgbl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.42 eb758aa1-0cc5-4da1-9262-c61e814a9e6a default }" containerID=1f8d26e4ac278ce7123f503a9a392c217c7d59fdfd267d6f4979cf5fb6e4e1bd datapathConfiguration="&{false false false false false }" interface=lxc7430fcf17780 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8wpv2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f8d26e4ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8wpv2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f8d26e4ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=9be85f3e-dccb-4c16-baf5-326be71518f6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9be85f3e-dccb-4c16-baf5-326be71518f6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8wpv2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=9be85f3e-dccb-4c16-baf5-326be71518f6;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=9be85f3e-dccb-4c16-baf5-326be71518f6;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f8d26e4ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 identity=24172 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=9be85f3e-dccb-4c16-baf5-326be71518f6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9be85f3e-dccb-4c16-baf5-326be71518f6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8wpv2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f8d26e4ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 identity=24172 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8wpv2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f8d26e4ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=342 identity=24172 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8wpv2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f8d26e4ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=342 identity=24172 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8wpv2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1f8d26e4ac endpointID=342 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-8wpv2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=9be85f3e-dccb-4c16-baf5-326be71518f6 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=9be85f3e-dccb-4c16-baf5-326be71518f6 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=1f8d26e4ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=342 identity=24172 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8wpv2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 218a06c9-d9f2-487a-8d4f-62b818e31c86 default }" containerID=4559f09278a0cd52c07701ff9317fc5f62fc1e3248b813c25fc0269fd4726205 datapathConfiguration="&{false false false false false }" interface=lxce8592220337c k8sPodName=local-path-storage/helper-pod-create-pvc-4fc247c8-95c0-4e12-be89-4cb99e6c6694 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4559f09278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4fc247c8-95c0-4e12-be89-4cb99e6c6694 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4559f09278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4fc247c8-95c0-4e12-be89-4cb99e6c6694 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4559f09278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 identity=20494 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4fc247c8-95c0-4e12-be89-4cb99e6c6694 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4559f09278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 identity=20494 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4fc247c8-95c0-4e12-be89-4cb99e6c6694 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4559f09278 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1957 identity=20494 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4fc247c8-95c0-4e12-be89-4cb99e6c6694 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4559f09278 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1957 identity=20494 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4fc247c8-95c0-4e12-be89-4cb99e6c6694 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.169 01a07dc7-c0fb-4213-bbd2-003ce88750be default }" containerID=f9a67abc40b667d80eb23edc01dc28183e6da1923c054c8dd1e06fa4a2948b8f datapathConfiguration="&{false false false false false }" interface=lxc61e119360b28 k8sPodName=local-path-storage/helper-pod-create-pvc-99634712-fef5-4f96-8d84-d524542b188b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9a67abc40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99634712-fef5-4f96-8d84-d524542b188b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9a67abc40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99634712-fef5-4f96-8d84-d524542b188b subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f9a67abc40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identity=20494 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99634712-fef5-4f96-8d84-d524542b188b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9a67abc40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identity=20494 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99634712-fef5-4f96-8d84-d524542b188b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9a67abc40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=156 identity=20494 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99634712-fef5-4f96-8d84-d524542b188b subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9a67abc40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=156 identity=20494 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99634712-fef5-4f96-8d84-d524542b188b subsys=daemon level=info msg="Delete endpoint request" containerID=4559f09278 endpointID=1957 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4fc247c8-95c0-4e12-be89-4cb99e6c6694 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=f9a67abc40 endpointID=156 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-99634712-fef5-4f96-8d84-d524542b188b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4559f09278 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1957 identity=20494 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4fc247c8-95c0-4e12-be89-4cb99e6c6694 subsys=endpoint level=info msg="Removed endpoint" containerID=f9a67abc40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=156 identity=20494 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99634712-fef5-4f96-8d84-d524542b188b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 cc723cbe-95f9-4a67-9ea3-5f75c8dbb41c default }" containerID=361d147adbdad1294d20a27660bb9df369155ec1be846a708d3ace47ded6088c datapathConfiguration="&{false false false false false }" interface=lxc695f67421de0 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=361d147adb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 52e9eac3-0d12-4602-a3a0-ed7c6c897068 default }" containerID=1d8dea234e154faa53e53f2cdd4e37b1e6eb59c7b9f16defd7d9bcd84bb4d47a datapathConfiguration="&{false false false false false }" interface=lxc96d763783172 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d8dea234e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=361d147adb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=1d8dea234e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=361d147adb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=52846 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=361d147adb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=52846 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1d8dea234e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d8dea234e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=25107 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d8dea234e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=25107 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=361d147adb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=295 identity=52846 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=361d147adb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=295 identity=52846 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1d8dea234e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1390 identity=25107 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d8dea234e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1390 identity=25107 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.210 84ae7adc-7679-4190-8df9-a32b80836b32 default }" containerID=b3e28b66a8fb1e00bfcdc971a1848844dc46ab0a9b165af0912bd2c2ef048e9e datapathConfiguration="&{false false false false false }" interface=lxcd95c340d4b94 k8sPodName=monitoring/loki-gateway-cf54cb88c-8fgsh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3e28b66a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2830 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8fgsh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3e28b66a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2830 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8fgsh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3e28b66a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2830 identity=46255 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8fgsh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3e28b66a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2830 identity=46255 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8fgsh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 ac63489b-1eb2-46f4-8c97-9afe33786eea default }" containerID=9e954b9a5386ea8bd9e2d48a8d6aec730c44bb39e1e2a2333361cadec4762cf9 datapathConfiguration="&{false false false false false }" interface=lxcb9db0a385a32 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e954b9a53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=624 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e954b9a53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=624 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e954b9a53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=624 identity=50073 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e954b9a53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=624 identity=50073 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3e28b66a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2830 identity=46255 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8fgsh subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3e28b66a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2830 identity=46255 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8fgsh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9e954b9a53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=624 identity=50073 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e954b9a53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=624 identity=50073 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 c458f8d3-b328-4482-ae5f-a66bf9a914d6 default }" containerID=5bfea123621319b5e4aa189a633e22a5928af49d13ff4c8aaa4ff73701c14ab0 datapathConfiguration="&{false false false false false }" interface=lxc23bbb964273f k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5bfea12362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2855 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5bfea12362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2855 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5bfea12362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2855 identity=24500 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5bfea12362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2855 identity=24500 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5bfea12362 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2855 identity=24500 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5bfea12362 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2855 identity=24500 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 9a79b075-5bdb-4ce4-bf95-203f37468cdc default }" containerID=241069d86ac01fb6971f3a087bc0f6dd9abaa98730221a93b2523f88b42e7308 datapathConfiguration="&{false false false false false }" interface=lxc18ee3e3cfda9 k8sPodName=local-path-storage/helper-pod-create-pvc-bf7d5dc0-2a49-451e-a706-104ffc40c621 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=241069d86a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3179 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf7d5dc0-2a49-451e-a706-104ffc40c621 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=241069d86a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3179 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf7d5dc0-2a49-451e-a706-104ffc40c621 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=241069d86a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3179 identity=20494 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf7d5dc0-2a49-451e-a706-104ffc40c621 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=241069d86a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3179 identity=20494 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf7d5dc0-2a49-451e-a706-104ffc40c621 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=241069d86a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3179 identity=20494 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf7d5dc0-2a49-451e-a706-104ffc40c621 subsys=endpoint level=info msg="Successful endpoint creation" containerID=241069d86a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3179 identity=20494 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf7d5dc0-2a49-451e-a706-104ffc40c621 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.154 0d1e0448-bca2-4b0e-a42e-079323ceacc1 default }" containerID=757036ec53ba5f215ae2e1d10dfdfea46d98f72a7f2cafa38f2b4c5cf424f460 datapathConfiguration="&{false false false false false }" interface=lxccdb0abdd66d5 k8sPodName=monitoring/vector-srcxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=757036ec53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2194 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/vector-srcxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=757036ec53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2194 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/vector-srcxm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=757036ec53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2194 identity=34021 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/vector-srcxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=757036ec53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2194 identity=34021 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/vector-srcxm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=757036ec53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2194 identity=34021 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/vector-srcxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=757036ec53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2194 identity=34021 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/vector-srcxm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=241069d86a endpointID=3179 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bf7d5dc0-2a49-451e-a706-104ffc40c621 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=241069d86a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3179 identity=20494 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf7d5dc0-2a49-451e-a706-104ffc40c621 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 93c57cde-a751-455a-a478-e634e6b563cc default }" containerID=b30e8628779ec864171cf9668cc5357964ee0af6c561f08648f35cf700498397 datapathConfiguration="&{false false false false false }" interface=lxcc3955754620f k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b30e862877 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3598 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b30e862877 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3598 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b30e862877 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3598 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b30e862877 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3598 identity=10625 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b30e862877 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3598 identity=10625 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 ef0d2ee8-437f-4feb-8e1c-86bbccb2416d default }" containerID=cd24a5f3dcfe04a7a10873cec514e858914e5ae985f263e13d1fe5af4b9d7194 datapathConfiguration="&{false false false false false }" interface=lxc8093c11a9ad1 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-56gs4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd24a5f3dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-56gs4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd24a5f3dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-56gs4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd24a5f3dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 identity=11854 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-56gs4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd24a5f3dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 identity=11854 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-56gs4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b30e862877 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3598 identity=10625 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b30e862877 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3598 identity=10625 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cd24a5f3dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1615 identity=11854 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-56gs4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd24a5f3dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1615 identity=11854 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-56gs4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.16 ba7e5843-934e-4b15-9b9b-4d408a9ba39a default }" containerID=d33d803995aa6c3a729ed950914d4c9624bcc054d540acf53666c79543f0831a datapathConfiguration="&{false false false false false }" interface=lxc562468abde92 k8sPodName=openstack/memcached-memcached-6479589586-gt9tf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d33d803995 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gt9tf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d33d803995 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gt9tf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d33d803995 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gt9tf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d33d803995 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=10918 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gt9tf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d33d803995 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=10918 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gt9tf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d33d803995 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=373 identity=10918 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gt9tf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d33d803995 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=373 identity=10918 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gt9tf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.196 82c7ae3e-d31b-499b-a61b-64220bb2ee9c default }" containerID=a701dcb0310d037197d3099e35fb138fa6fd4487ae2b5128f2457d773cee778e datapathConfiguration="&{false false false false false }" interface=lxcb036d3f5ddc1 k8sPodName=local-path-storage/helper-pod-create-pvc-0870e330-6b5f-4bcd-b066-bf27b21e4142 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a701dcb031 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0870e330-6b5f-4bcd-b066-bf27b21e4142 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a701dcb031 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0870e330-6b5f-4bcd-b066-bf27b21e4142 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a701dcb031 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identity=20494 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0870e330-6b5f-4bcd-b066-bf27b21e4142 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a701dcb031 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identity=20494 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0870e330-6b5f-4bcd-b066-bf27b21e4142 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a701dcb031 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2198 identity=20494 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0870e330-6b5f-4bcd-b066-bf27b21e4142 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a701dcb031 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2198 identity=20494 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0870e330-6b5f-4bcd-b066-bf27b21e4142 subsys=daemon level=info msg="Delete endpoint request" containerID=a701dcb031 endpointID=2198 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0870e330-6b5f-4bcd-b066-bf27b21e4142 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a701dcb031 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2198 identity=20494 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0870e330-6b5f-4bcd-b066-bf27b21e4142 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 a035981d-0156-4231-8133-cb21f9e09aab default }" containerID=53651b44a0c67cd124247b356d35c8a054ab0134e86a6a0e72b65ac7636e7dbc datapathConfiguration="&{false false false false false }" interface=lxca39e320e745e k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53651b44a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53651b44a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=53651b44a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identity=25248 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53651b44a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identity=25248 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=53651b44a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1451 identity=25248 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=53651b44a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1451 identity=25248 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.141 7929785e-841a-42c8-b13d-340dfced86b8 default }" containerID=eebe5d81221842472337165a0bef0300507d06525d7a0fd39186f4090518f3c1 datapathConfiguration="&{false false false false false }" interface=lxce34e91a8ae3d k8sPodName=openstack/keystone-api-55d58fd749-g8brh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eebe5d8122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-api-55d58fd749-g8brh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eebe5d8122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-api-55d58fd749-g8brh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=eebe5d8122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-api-55d58fd749-g8brh line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=eebe5d8122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=1926 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-api-55d58fd749-g8brh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eebe5d8122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=1926 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-api-55d58fd749-g8brh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 bb20101c-1782-47a9-ac9b-d2741437055e default }" containerID=2086e3d0bcd9e9660406741865f9870d7fbe78d45c6f75b9e6318a7abb19ad34 datapathConfiguration="&{false false false false false }" interface=lxcc721b2af61eb k8sPodName=openstack/keystone-credential-setup-x6s9x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2086e3d0bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1677 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-credential-setup-x6s9x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2086e3d0bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1677 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3d2eff37-bc0e-4436-90c2-5bc578afca22,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=3d2eff37-bc0e-4436-90c2-5bc578afca22,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-credential-setup-x6s9x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3d2eff37-bc0e-4436-90c2-5bc578afca22;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=3d2eff37-bc0e-4436-90c2-5bc578afca22;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2086e3d0bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1677 identity=628 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3d2eff37-bc0e-4436-90c2-5bc578afca22,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=3d2eff37-bc0e-4436-90c2-5bc578afca22,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-credential-setup-x6s9x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2086e3d0bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1677 identity=628 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-credential-setup-x6s9x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eebe5d8122 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1456 identity=1926 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-api-55d58fd749-g8brh subsys=endpoint level=info msg="Successful endpoint creation" containerID=eebe5d8122 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1456 identity=1926 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-api-55d58fd749-g8brh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2086e3d0bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1677 identity=628 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-credential-setup-x6s9x subsys=endpoint level=info msg="Successful endpoint creation" containerID=2086e3d0bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1677 identity=628 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-credential-setup-x6s9x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2086e3d0bc endpointID=1677 k8sNamespace=openstack k8sPodName=keystone-credential-setup-x6s9x subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3d2eff37-bc0e-4436-90c2-5bc578afca22 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=3d2eff37-bc0e-4436-90c2-5bc578afca22 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2086e3d0bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1677 identity=628 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-credential-setup-x6s9x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 3dd95e86-0f3d-43e7-8753-eac64a95e7a1 default }" containerID=6a2da6cd022baca798c174a07d70b3e5f9c5714a783bbd259c6c840741d2c085 datapathConfiguration="&{false false false false false }" interface=lxc6b204b34e5af k8sPodName=openstack/keystone-db-init-8rb9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a2da6cd02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-db-init-8rb9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a2da6cd02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4cd41e07-ef65-4589-bba0-789799696fc1,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=4cd41e07-ef65-4589-bba0-789799696fc1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-db-init-8rb9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4cd41e07-ef65-4589-bba0-789799696fc1;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=4cd41e07-ef65-4589-bba0-789799696fc1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a2da6cd02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identity=28342 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4cd41e07-ef65-4589-bba0-789799696fc1,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=4cd41e07-ef65-4589-bba0-789799696fc1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-db-init-8rb9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a2da6cd02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identity=28342 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-db-init-8rb9t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a2da6cd02 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=865 identity=28342 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-db-init-8rb9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a2da6cd02 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=865 identity=28342 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-db-init-8rb9t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6a2da6cd02 endpointID=865 k8sNamespace=openstack k8sPodName=keystone-db-init-8rb9t subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4cd41e07-ef65-4589-bba0-789799696fc1 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=4cd41e07-ef65-4589-bba0-789799696fc1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6a2da6cd02 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=865 identity=28342 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-db-init-8rb9t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 da27500f-0dfb-4691-b54f-d57212e9b227 default }" containerID=2b8e281750c0b783ef3b20421ffe2a2cffc14223dedea0af22c3ca10daa9304c datapathConfiguration="&{false false false false false }" interface=lxc5bb48534f7e5 k8sPodName=openstack/keystone-fernet-setup-qnj5m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b8e281750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3438 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-qnj5m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b8e281750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3438 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e2385ea7-a347-44fa-b9aa-704624e6e8e6,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=e2385ea7-a347-44fa-b9aa-704624e6e8e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-qnj5m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e2385ea7-a347-44fa-b9aa-704624e6e8e6;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=e2385ea7-a347-44fa-b9aa-704624e6e8e6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b8e281750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3438 identity=25896 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e2385ea7-a347-44fa-b9aa-704624e6e8e6,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=e2385ea7-a347-44fa-b9aa-704624e6e8e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-qnj5m oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2b8e281750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3438 identity=25896 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-qnj5m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b8e281750 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3438 identity=25896 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-qnj5m subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b8e281750 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3438 identity=25896 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-qnj5m subsys=daemon level=info msg="Delete endpoint request" containerID=2b8e281750 endpointID=3438 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-qnj5m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e2385ea7-a347-44fa-b9aa-704624e6e8e6 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=e2385ea7-a347-44fa-b9aa-704624e6e8e6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2b8e281750 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3438 identity=25896 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-qnj5m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 dfcb8d29-3a57-494d-8699-502fc72553eb default }" containerID=c8e28690e57cd743c72ded9a37f8c3b042b6730e38e7271011bd666e60713461 datapathConfiguration="&{false false false false false }" interface=lxc9c327e13e3c6 k8sPodName=openstack/keystone-db-sync-46rcg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8e28690e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2178 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-db-sync-46rcg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8e28690e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2178 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9636a815-13cc-4d02-8103-907b3aa55499,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=9636a815-13cc-4d02-8103-907b3aa55499,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-db-sync-46rcg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9636a815-13cc-4d02-8103-907b3aa55499;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=9636a815-13cc-4d02-8103-907b3aa55499;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8e28690e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2178 identity=57532 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9636a815-13cc-4d02-8103-907b3aa55499,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=9636a815-13cc-4d02-8103-907b3aa55499,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-db-sync-46rcg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c8e28690e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2178 identity=57532 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-db-sync-46rcg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8e28690e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2178 identity=57532 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-db-sync-46rcg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8e28690e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2178 identity=57532 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-db-sync-46rcg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c8e28690e5 endpointID=2178 k8sNamespace=openstack k8sPodName=keystone-db-sync-46rcg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9636a815-13cc-4d02-8103-907b3aa55499 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=9636a815-13cc-4d02-8103-907b3aa55499 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c8e28690e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2178 identity=57532 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-db-sync-46rcg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 910db273-793c-49aa-a691-79a6d0dd6623 default }" containerID=789af68b236a36e11817f21afb20c734f216cfc304970b5bf013db92cc11c905 datapathConfiguration="&{false false false false false }" interface=lxcfb8cfc66fb33 k8sPodName=openstack/keystone-rabbit-init-pf4pz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=789af68b23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-rabbit-init-pf4pz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=789af68b23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=84e3e761-4094-443e-b9a2-7f2d11e985ba,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=84e3e761-4094-443e-b9a2-7f2d11e985ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-rabbit-init-pf4pz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=84e3e761-4094-443e-b9a2-7f2d11e985ba;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=84e3e761-4094-443e-b9a2-7f2d11e985ba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=789af68b23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-rabbit-init-pf4pz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=789af68b23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identity=10017 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=84e3e761-4094-443e-b9a2-7f2d11e985ba,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=84e3e761-4094-443e-b9a2-7f2d11e985ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-rabbit-init-pf4pz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=789af68b23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identity=10017 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-rabbit-init-pf4pz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=789af68b23 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1516 identity=10017 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-rabbit-init-pf4pz subsys=endpoint level=info msg="Successful endpoint creation" containerID=789af68b23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1516 identity=10017 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-rabbit-init-pf4pz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=789af68b23 endpointID=1516 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-pf4pz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=84e3e761-4094-443e-b9a2-7f2d11e985ba k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=84e3e761-4094-443e-b9a2-7f2d11e985ba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=789af68b23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1516 identity=10017 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-rabbit-init-pf4pz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 c0427601-315b-4e96-8c5e-f6e63ad38589 default }" containerID=b4b0e276f20403e962abe47a8b41811cddc81ec2bac1a15a02129bae4d932300 datapathConfiguration="&{false false false false false }" interface=lxcb2a3df6e31d9 k8sPodName=openstack/keystone-domain-manage-gt5gq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4b0e276f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3424 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-domain-manage-gt5gq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4b0e276f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3424 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a1c4545b-06c3-45d9-9776-7a8e72084412,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=a1c4545b-06c3-45d9-9776-7a8e72084412,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-domain-manage-gt5gq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a1c4545b-06c3-45d9-9776-7a8e72084412;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=a1c4545b-06c3-45d9-9776-7a8e72084412;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4b0e276f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3424 identity=44762 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a1c4545b-06c3-45d9-9776-7a8e72084412,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=a1c4545b-06c3-45d9-9776-7a8e72084412,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-domain-manage-gt5gq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4b0e276f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3424 identity=44762 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-domain-manage-gt5gq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b4b0e276f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3424 identity=44762 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-domain-manage-gt5gq subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4b0e276f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3424 identity=44762 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-domain-manage-gt5gq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4b0e276f2 endpointID=3424 k8sNamespace=openstack k8sPodName=keystone-domain-manage-gt5gq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a1c4545b-06c3-45d9-9776-7a8e72084412 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=a1c4545b-06c3-45d9-9776-7a8e72084412 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b4b0e276f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3424 identity=44762 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-domain-manage-gt5gq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 4277aedc-0cb5-42b1-b409-09e21f160724 default }" containerID=fab4f3f47c788dd12dcf9a15e2cca01e438b531286b64a484224c3f8daa86f3a datapathConfiguration="&{false false false false false }" interface=lxc3c5804b39920 k8sPodName=openstack/keystone-bootstrap-92kmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fab4f3f47c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-bootstrap-92kmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fab4f3f47c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=20c332f0-24a9-4878-a73f-fac36a9b86c2,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=20c332f0-24a9-4878-a73f-fac36a9b86c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-bootstrap-92kmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=20c332f0-24a9-4878-a73f-fac36a9b86c2;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=20c332f0-24a9-4878-a73f-fac36a9b86c2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fab4f3f47c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 identity=51044 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=20c332f0-24a9-4878-a73f-fac36a9b86c2,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=20c332f0-24a9-4878-a73f-fac36a9b86c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-bootstrap-92kmx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fab4f3f47c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 identity=51044 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-bootstrap-92kmx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fab4f3f47c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=340 identity=51044 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-bootstrap-92kmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=fab4f3f47c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=340 identity=51044 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-bootstrap-92kmx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fab4f3f47c endpointID=340 k8sNamespace=openstack k8sPodName=keystone-bootstrap-92kmx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=20c332f0-24a9-4878-a73f-fac36a9b86c2 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=20c332f0-24a9-4878-a73f-fac36a9b86c2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fab4f3f47c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=340 identity=51044 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-bootstrap-92kmx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 c2d9f4e5-1814-44dc-8356-42fe31178ead default }" containerID=983c32558b390f615b198bb988ecca756eb8d1082662a7b3597f3d7326a2994d datapathConfiguration="&{false false false false false }" interface=lxca08b03b44528 k8sPodName=local-path-storage/helper-pod-create-pvc-959b2915-d0f5-48ba-9d3e-bf078d35c56d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=983c32558b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2942 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-959b2915-d0f5-48ba-9d3e-bf078d35c56d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=983c32558b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2942 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-959b2915-d0f5-48ba-9d3e-bf078d35c56d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=983c32558b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2942 identity=20494 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-959b2915-d0f5-48ba-9d3e-bf078d35c56d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=983c32558b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2942 identity=20494 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-959b2915-d0f5-48ba-9d3e-bf078d35c56d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=983c32558b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2942 identity=20494 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-959b2915-d0f5-48ba-9d3e-bf078d35c56d subsys=endpoint level=info msg="Successful endpoint creation" containerID=983c32558b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2942 identity=20494 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-959b2915-d0f5-48ba-9d3e-bf078d35c56d subsys=daemon level=info msg="Delete endpoint request" containerID=983c32558b endpointID=2942 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-959b2915-d0f5-48ba-9d3e-bf078d35c56d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=983c32558b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2942 identity=20494 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-959b2915-d0f5-48ba-9d3e-bf078d35c56d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 8c0ebeb9-0bdc-4892-8ea1-cf8309176393 default }" containerID=49c6a1fd27fa2071b7554d1fc2e4814902585983f72afd27c2563894ebe78733 datapathConfiguration="&{false false false false false }" interface=lxc779c27f99135 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49c6a1fd27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49c6a1fd27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49c6a1fd27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identity=45475 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=49c6a1fd27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identity=45475 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49c6a1fd27 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2386 identity=45475 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=49c6a1fd27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2386 identity=45475 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.148 2ccead55-ebc5-4d66-81ac-ef0698152aa2 default }" containerID=d8f257aa2feacc785a286eb59534c74fc3cec5429a84d68607e5e5ef54ab8c1a datapathConfiguration="&{false false false false false }" interface=lxcf5db0691781f k8sPodName=openstack/barbican-api-765b89998b-gwt25 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8f257aa2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-api-765b89998b-gwt25 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8f257aa2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-api-765b89998b-gwt25 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8f257aa2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identity=1878 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-api-765b89998b-gwt25 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8f257aa2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identity=1878 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-api-765b89998b-gwt25 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 3489de5e-b2a6-4b86-8d42-629d6386a643 default }" containerID=8ee686e4bc12d886f6fe691343bb21d934edfa443730de53165445fbd3c319df datapathConfiguration="&{false false false false false }" interface=lxc8c6cadc336e6 k8sPodName=openstack/barbican-db-init-6ssqx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ee686e4bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-init-6ssqx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ee686e4bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a8cd6845-fbfb-4002-889f-ee8dce60e8af,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a8cd6845-fbfb-4002-889f-ee8dce60e8af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-init-6ssqx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a8cd6845-fbfb-4002-889f-ee8dce60e8af;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=a8cd6845-fbfb-4002-889f-ee8dce60e8af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ee686e4bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=27554 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a8cd6845-fbfb-4002-889f-ee8dce60e8af,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a8cd6845-fbfb-4002-889f-ee8dce60e8af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-init-6ssqx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ee686e4bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=27554 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-init-6ssqx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8f257aa2f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2250 identity=1878 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-api-765b89998b-gwt25 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8f257aa2f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2250 identity=1878 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-api-765b89998b-gwt25 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8ee686e4bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=688 identity=27554 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-init-6ssqx subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ee686e4bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=688 identity=27554 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-init-6ssqx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ee686e4bc endpointID=688 k8sNamespace=openstack k8sPodName=barbican-db-init-6ssqx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a8cd6845-fbfb-4002-889f-ee8dce60e8af k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=a8cd6845-fbfb-4002-889f-ee8dce60e8af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8ee686e4bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=688 identity=27554 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-init-6ssqx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 902f29c5-124e-4249-b782-b712e8da6938 default }" containerID=fc441a05315fda81c66fef5c55f57f83f00187f00161c5c4a8e318d5cbc3dd21 datapathConfiguration="&{false false false false false }" interface=lxc7dee0f65085d k8sPodName=openstack/barbican-db-sync-fqf58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc441a0531 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-sync-fqf58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc441a0531 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0ec7fdde-f234-4c83-9f16-eaac67ae8c99,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=0ec7fdde-f234-4c83-9f16-eaac67ae8c99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-sync-fqf58 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0ec7fdde-f234-4c83-9f16-eaac67ae8c99;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=0ec7fdde-f234-4c83-9f16-eaac67ae8c99;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc441a0531 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=25878 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0ec7fdde-f234-4c83-9f16-eaac67ae8c99,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=0ec7fdde-f234-4c83-9f16-eaac67ae8c99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-sync-fqf58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc441a0531 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=25878 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-sync-fqf58 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fc441a0531 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=260 identity=25878 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-sync-fqf58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc441a0531 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=260 identity=25878 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-sync-fqf58 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03645149945216227 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=fc441a0531 endpointID=260 k8sNamespace=openstack k8sPodName=barbican-db-sync-fqf58 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0ec7fdde-f234-4c83-9f16-eaac67ae8c99 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=0ec7fdde-f234-4c83-9f16-eaac67ae8c99 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fc441a0531 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=260 identity=25878 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-sync-fqf58 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 b8caa053-8eda-4ee2-8d51-9690bf6e3361 default }" containerID=c4a132ca1a7a49ac7b6dcf2aecf57f7fe2b0673466ef9cab9c5114217e037cdd datapathConfiguration="&{false false false false false }" interface=lxcc90fc45835aa k8sPodName=openstack/barbican-rabbit-init-drdng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4a132ca1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-rabbit-init-drdng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4a132ca1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e31bda8d-8b0c-4b42-b06f-45c68026b9b8,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e31bda8d-8b0c-4b42-b06f-45c68026b9b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-rabbit-init-drdng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e31bda8d-8b0c-4b42-b06f-45c68026b9b8;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e31bda8d-8b0c-4b42-b06f-45c68026b9b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4a132ca1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identity=12570 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e31bda8d-8b0c-4b42-b06f-45c68026b9b8,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e31bda8d-8b0c-4b42-b06f-45c68026b9b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-rabbit-init-drdng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4a132ca1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identity=12570 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-rabbit-init-drdng subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c4a132ca1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=640 identity=12570 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-rabbit-init-drdng subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4a132ca1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=640 identity=12570 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-rabbit-init-drdng subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c4a132ca1a endpointID=640 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-drdng subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e31bda8d-8b0c-4b42-b06f-45c68026b9b8 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e31bda8d-8b0c-4b42-b06f-45c68026b9b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c4a132ca1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=640 identity=12570 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-rabbit-init-drdng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 79eecf87-3dec-4444-a20b-38f740858b6b default }" containerID=8883d6c1fc8808fa08e83e2d7eb175589042ed4aa174c27db572596f27e8f15f datapathConfiguration="&{false false false false false }" interface=lxc95144a4b2ffd k8sPodName=openstack/barbican-ks-service-rd5w2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8883d6c1fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1430 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-ks-service-rd5w2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8883d6c1fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1430 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3c3422d8-63be-4bd7-b204-9bedffb4c087,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3c3422d8-63be-4bd7-b204-9bedffb4c087,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-ks-service-rd5w2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3c3422d8-63be-4bd7-b204-9bedffb4c087;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=3c3422d8-63be-4bd7-b204-9bedffb4c087;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8883d6c1fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1430 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-ks-service-rd5w2 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8883d6c1fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1430 identity=54000 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3c3422d8-63be-4bd7-b204-9bedffb4c087,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3c3422d8-63be-4bd7-b204-9bedffb4c087,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-ks-service-rd5w2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8883d6c1fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1430 identity=54000 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-ks-service-rd5w2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8883d6c1fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1430 identity=54000 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-ks-service-rd5w2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8883d6c1fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1430 identity=54000 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-ks-service-rd5w2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8883d6c1fc endpointID=1430 k8sNamespace=openstack k8sPodName=barbican-ks-service-rd5w2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3c3422d8-63be-4bd7-b204-9bedffb4c087 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=3c3422d8-63be-4bd7-b204-9bedffb4c087 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8883d6c1fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1430 identity=54000 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-ks-service-rd5w2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 248abad4-116e-4baf-ae54-9fd091325168 default }" containerID=ba0a25e99c7c4fbb01424e6d83939b7018dab5444247adc11ffe4bdd2b85da6e datapathConfiguration="&{false false false false false }" interface=lxc699fc5a72677 k8sPodName=openstack/barbican-ks-endpoints-zjvjx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba0a25e99c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=810 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zjvjx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba0a25e99c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=810 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f39c975b-5bb0-4fd5-933e-8c2391f52ff3,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f39c975b-5bb0-4fd5-933e-8c2391f52ff3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zjvjx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f39c975b-5bb0-4fd5-933e-8c2391f52ff3;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f39c975b-5bb0-4fd5-933e-8c2391f52ff3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba0a25e99c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=810 identity=18383 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f39c975b-5bb0-4fd5-933e-8c2391f52ff3,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f39c975b-5bb0-4fd5-933e-8c2391f52ff3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zjvjx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ba0a25e99c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=810 identity=18383 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zjvjx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba0a25e99c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=810 identity=18383 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zjvjx subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba0a25e99c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=810 identity=18383 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zjvjx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ba0a25e99c endpointID=810 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-zjvjx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f39c975b-5bb0-4fd5-933e-8c2391f52ff3 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f39c975b-5bb0-4fd5-933e-8c2391f52ff3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ba0a25e99c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=810 identity=18383 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zjvjx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 a5132c02-a683-4299-92a6-9ba2209c53c0 default }" containerID=94ec893a3edd25ab74a3a2a2ad8c61f02b36c61e68093d1bc40357cf2020abfd datapathConfiguration="&{false false false false false }" interface=lxc8bf8582075ea k8sPodName=openstack/barbican-ks-user-dlx7n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94ec893a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1715 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-ks-user-dlx7n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94ec893a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1715 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b0d5ad1c-0300-4004-ab7a-e970a83ba2fb,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b0d5ad1c-0300-4004-ab7a-e970a83ba2fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-ks-user-dlx7n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b0d5ad1c-0300-4004-ab7a-e970a83ba2fb;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=b0d5ad1c-0300-4004-ab7a-e970a83ba2fb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94ec893a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1715 identity=2914 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b0d5ad1c-0300-4004-ab7a-e970a83ba2fb,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b0d5ad1c-0300-4004-ab7a-e970a83ba2fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-ks-user-dlx7n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94ec893a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1715 identity=2914 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-ks-user-dlx7n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=94ec893a3e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1715 identity=2914 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-ks-user-dlx7n subsys=endpoint level=info msg="Successful endpoint creation" containerID=94ec893a3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1715 identity=2914 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-ks-user-dlx7n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=94ec893a3e endpointID=1715 k8sNamespace=openstack k8sPodName=barbican-ks-user-dlx7n subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b0d5ad1c-0300-4004-ab7a-e970a83ba2fb k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=b0d5ad1c-0300-4004-ab7a-e970a83ba2fb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=94ec893a3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1715 identity=2914 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-ks-user-dlx7n subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.55 bc1f29a1-e22b-4fb6-9544-50298a6f4e76 default }" containerID=d8f00d02151031e8891a8b23d86fca15d91d28b629fc1225213d302c433f34d4 datapathConfiguration="&{false false false false false }" interface=lxcac11aa8f5957 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pszg2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8f00d0215 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pszg2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8f00d0215 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pszg2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8f00d0215 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=26928 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pszg2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d8f00d0215 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=26928 ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pszg2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8f00d0215 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=690 identity=26928 ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pszg2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8f00d0215 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=690 identity=26928 ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pszg2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.17 403ff7be-fd12-4091-8f36-4eac44de32a5 default }" containerID=5af11b127a40d7dbad852f9d28f8254612a34a80dc344e234d690d6e12266331 datapathConfiguration="&{false false false false false }" interface=lxc8807037e57cb k8sPodName=openstack/rook-ceph-detect-version-2bntd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5af11b127a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=317 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2bntd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5af11b127a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=317 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=c056568b-0816-4928-865b-e451e0ef301f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=c056568b-0816-4928-865b-e451e0ef301f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2bntd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=c056568b-0816-4928-865b-e451e0ef301f;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=c056568b-0816-4928-865b-e451e0ef301f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5af11b127a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=317 identity=858 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=c056568b-0816-4928-865b-e451e0ef301f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=c056568b-0816-4928-865b-e451e0ef301f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2bntd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5af11b127a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=317 identity=858 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2bntd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5af11b127a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=317 identity=858 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2bntd subsys=endpoint level=info msg="Successful endpoint creation" containerID=5af11b127a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=317 identity=858 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2bntd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5af11b127a endpointID=317 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-2bntd subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=c056568b-0816-4928-865b-e451e0ef301f k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=c056568b-0816-4928-865b-e451e0ef301f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=5af11b127a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=317 identity=858 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2bntd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 4072b4c4-100b-4166-860a-ce03974044ac default }" containerID=a0d898b095fb7ddeed82de7be0b4d6a3eb9c311ac40c70e5188b19c51fd321f9 datapathConfiguration="&{false false false false false }" interface=lxc8975f96bcbb8 k8sPodName=openstack/ceph-object-controller-detect-version-9gln8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0d898b095 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9gln8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0d898b095 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=220f9fc3-f128-47d2-9934-b1c18fceb248,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=220f9fc3-f128-47d2-9934-b1c18fceb248,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9gln8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=220f9fc3-f128-47d2-9934-b1c18fceb248;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=220f9fc3-f128-47d2-9934-b1c18fceb248;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0d898b095 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identity=11644 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=220f9fc3-f128-47d2-9934-b1c18fceb248,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=220f9fc3-f128-47d2-9934-b1c18fceb248,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9gln8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0d898b095 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identity=11644 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9gln8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a0d898b095 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=545 identity=11644 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9gln8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0d898b095 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=545 identity=11644 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9gln8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a0d898b095 endpointID=545 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-9gln8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=220f9fc3-f128-47d2-9934-b1c18fceb248 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=220f9fc3-f128-47d2-9934-b1c18fceb248 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=a0d898b095 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=545 identity=11644 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9gln8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 bd8da749-3dc9-4547-952e-a1ccee7d86c5 default }" containerID=d7ddcbdba8d60d9e46096b1a8b7c4a006f74e7e1d1b79e1430a3f10dd8ad77b4 datapathConfiguration="&{false false false false false }" interface=lxc293cb6661b96 k8sPodName=local-path-storage/helper-pod-create-pvc-ca3ef0f6-0625-40b7-b84b-fcab3066f46e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7ddcbdba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca3ef0f6-0625-40b7-b84b-fcab3066f46e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7ddcbdba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca3ef0f6-0625-40b7-b84b-fcab3066f46e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7ddcbdba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 identity=20494 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca3ef0f6-0625-40b7-b84b-fcab3066f46e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7ddcbdba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 identity=20494 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca3ef0f6-0625-40b7-b84b-fcab3066f46e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7ddcbdba8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3950 identity=20494 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca3ef0f6-0625-40b7-b84b-fcab3066f46e subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7ddcbdba8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3950 identity=20494 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca3ef0f6-0625-40b7-b84b-fcab3066f46e subsys=daemon level=info msg="Delete endpoint request" containerID=d7ddcbdba8 endpointID=3950 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ca3ef0f6-0625-40b7-b84b-fcab3066f46e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d7ddcbdba8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3950 identity=20494 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca3ef0f6-0625-40b7-b84b-fcab3066f46e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 90554394-f7a3-44af-bf8a-35fde93c8498 default }" containerID=6e0aa62bbd8c278846fc2e170d628f4b863a705fca0740f1ab594e5ee74b9ff5 datapathConfiguration="&{false false false false false }" interface=lxccb96f4ae9f57 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e0aa62bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2888 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e0aa62bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2888 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6e0aa62bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2888 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e0aa62bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2888 identity=15249 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e0aa62bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2888 identity=15249 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e0aa62bbd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2888 identity=15249 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e0aa62bbd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2888 identity=15249 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.230 0d5d9edb-8152-49ac-92ea-8dd3bba6dde2 default }" containerID=21a39109a5a0a9e2e1e4d5664c7ade3afa6f554d12c287070cab69c0ec746d7e datapathConfiguration="&{false false false false false }" interface=lxcdcc8e7b0f1c2 k8sPodName=openstack/glance-db-init-jwldh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21a39109a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-jwldh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21a39109a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=87b668b8-0d67-438b-9a43-50113cf4903d,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=87b668b8-0d67-438b-9a43-50113cf4903d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-jwldh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=21a39109a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-jwldh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=87b668b8-0d67-438b-9a43-50113cf4903d;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=87b668b8-0d67-438b-9a43-50113cf4903d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21a39109a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identity=7327 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=87b668b8-0d67-438b-9a43-50113cf4903d,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=87b668b8-0d67-438b-9a43-50113cf4903d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-jwldh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21a39109a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identity=7327 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-jwldh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=21a39109a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2939 identity=7327 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-jwldh subsys=endpoint level=info msg="Successful endpoint creation" containerID=21a39109a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2939 identity=7327 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-jwldh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=21a39109a5 endpointID=2939 k8sNamespace=openstack k8sPodName=glance-db-init-jwldh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=87b668b8-0d67-438b-9a43-50113cf4903d k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=87b668b8-0d67-438b-9a43-50113cf4903d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=21a39109a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2939 identity=7327 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-jwldh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 b4b710d2-5a23-492b-b2ee-753bc9015335 default }" containerID=9d5b7f7cf71f92b1c72d1fc86efe8ec07f4450f0bb0e094855fbb9885b925d43 datapathConfiguration="&{false false false false false }" interface=lxc078427f2a195 k8sPodName=openstack/glance-db-sync-zt7zj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d5b7f7cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3071 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-sync-zt7zj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d5b7f7cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3071 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7ded5043-9a40-466b-abf3-b36f264518b4,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=7ded5043-9a40-466b-abf3-b36f264518b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-sync-zt7zj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7ded5043-9a40-466b-abf3-b36f264518b4;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=7ded5043-9a40-466b-abf3-b36f264518b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d5b7f7cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3071 identity=49619 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7ded5043-9a40-466b-abf3-b36f264518b4,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=7ded5043-9a40-466b-abf3-b36f264518b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-sync-zt7zj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d5b7f7cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3071 identity=49619 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-sync-zt7zj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d5b7f7cf7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3071 identity=49619 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-sync-zt7zj subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d5b7f7cf7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3071 identity=49619 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-sync-zt7zj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.58 e55fcc09-0e89-4bd6-b1e3-5721801829fa default }" containerID=0f57910d7b01f0e10ec16376ce1888c16f54e1b361146686ba9c98a8895a18c2 datapathConfiguration="&{false false false false false }" interface=lxcd10889b99256 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-llfst labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f57910d7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-llfst subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f57910d7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-llfst subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0f57910d7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-llfst line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f57910d7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identity=12841 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-llfst oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f57910d7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identity=12841 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-llfst subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 962e927c-43de-4764-9c64-99c2418c1d62 default }" containerID=25db1f0304b5fb42f85f0e79732f3633b4547946b019d9e526151ec9433a06f2 datapathConfiguration="&{false false false false false }" interface=lxc4d7b366d3351 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xn29s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25db1f0304 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xn29s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25db1f0304 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xn29s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25db1f0304 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=29606 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xn29s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25db1f0304 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=29606 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xn29s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f57910d7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1050 identity=12841 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-llfst subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f57910d7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1050 identity=12841 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-llfst subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=25db1f0304 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1038 identity=29606 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xn29s subsys=endpoint level=info msg="Successful endpoint creation" containerID=25db1f0304 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1038 identity=29606 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xn29s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9d5b7f7cf7 endpointID=3071 k8sNamespace=openstack k8sPodName=glance-db-sync-zt7zj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7ded5043-9a40-466b-abf3-b36f264518b4 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=7ded5043-9a40-466b-abf3-b36f264518b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9d5b7f7cf7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3071 identity=49619 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-sync-zt7zj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 58b4c5b5-d12e-42ab-85da-3e924ff0c340 default }" containerID=8d63b4e9ba0911726cfe4832c0f7d6c939a3aec9904ddf8b143160f748cf71c3 datapathConfiguration="&{false false false false false }" interface=lxcc7cefc1cb519 k8sPodName=openstack/glance-rabbit-init-jj89t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d63b4e9ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-rabbit-init-jj89t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d63b4e9ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=acc90036-fc8b-43b4-843c-5962cfb00365,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=acc90036-fc8b-43b4-843c-5962cfb00365,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-rabbit-init-jj89t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8d63b4e9ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-rabbit-init-jj89t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=acc90036-fc8b-43b4-843c-5962cfb00365;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=acc90036-fc8b-43b4-843c-5962cfb00365;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d63b4e9ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=1732 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=acc90036-fc8b-43b4-843c-5962cfb00365,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=acc90036-fc8b-43b4-843c-5962cfb00365,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-rabbit-init-jj89t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d63b4e9ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=1732 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-rabbit-init-jj89t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d63b4e9ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=124 identity=1732 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-rabbit-init-jj89t subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d63b4e9ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=1732 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-rabbit-init-jj89t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d63b4e9ba endpointID=124 k8sNamespace=openstack k8sPodName=glance-rabbit-init-jj89t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=acc90036-fc8b-43b4-843c-5962cfb00365 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=acc90036-fc8b-43b4-843c-5962cfb00365 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8d63b4e9ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=1732 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-rabbit-init-jj89t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 07386679-c48a-4fa1-9f60-516c8aaa4f23 default }" containerID=798a5e2fc7cc345dc0913d3b50429001b66a5d843df1f5caa5f092b100355a90 datapathConfiguration="&{false false false false false }" interface=lxcaf1fb3d4d0ac k8sPodName=openstack/glance-ks-service-trhl7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=798a5e2fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-trhl7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=798a5e2fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b8aed4f7-ac8d-456d-bd83-6d25b6b1e997,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=b8aed4f7-ac8d-456d-bd83-6d25b6b1e997,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-trhl7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b8aed4f7-ac8d-456d-bd83-6d25b6b1e997;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=b8aed4f7-ac8d-456d-bd83-6d25b6b1e997;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=798a5e2fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=4692 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b8aed4f7-ac8d-456d-bd83-6d25b6b1e997,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=b8aed4f7-ac8d-456d-bd83-6d25b6b1e997,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-trhl7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=798a5e2fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=4692 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-trhl7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=798a5e2fc7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=26 identity=4692 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-trhl7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=798a5e2fc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=26 identity=4692 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-trhl7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=798a5e2fc7 endpointID=26 k8sNamespace=openstack k8sPodName=glance-ks-service-trhl7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b8aed4f7-ac8d-456d-bd83-6d25b6b1e997 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=b8aed4f7-ac8d-456d-bd83-6d25b6b1e997 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=798a5e2fc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=26 identity=4692 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-trhl7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 3cbf3e09-5bfb-46bf-adb9-f23f0cfd253c default }" containerID=9a0a27e063ddfac11e1d3a50291907e749924a51399135c8e87ce18d7729916b datapathConfiguration="&{false false false false false }" interface=lxcef17803248d1 k8sPodName=openstack/glance-ks-endpoints-99dlm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a0a27e063 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-endpoints-99dlm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a0a27e063 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b76c814d-7e04-44c7-bba3-aebe439a27b1,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b76c814d-7e04-44c7-bba3-aebe439a27b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-endpoints-99dlm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9a0a27e063 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-endpoints-99dlm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b76c814d-7e04-44c7-bba3-aebe439a27b1;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b76c814d-7e04-44c7-bba3-aebe439a27b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a0a27e063 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 identity=43632 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b76c814d-7e04-44c7-bba3-aebe439a27b1,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b76c814d-7e04-44c7-bba3-aebe439a27b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-endpoints-99dlm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a0a27e063 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 identity=43632 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-endpoints-99dlm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a0a27e063 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2065 identity=43632 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-endpoints-99dlm subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a0a27e063 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2065 identity=43632 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-endpoints-99dlm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9a0a27e063 endpointID=2065 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-99dlm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b76c814d-7e04-44c7-bba3-aebe439a27b1 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b76c814d-7e04-44c7-bba3-aebe439a27b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9a0a27e063 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2065 identity=43632 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-endpoints-99dlm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 7d0346e9-0e69-4eac-bb4d-86a5dcd0b58b default }" containerID=5d75ff19404905e7c738b2f7e8b885ab65372fe81f2a3cc737fdfe1331a8252a datapathConfiguration="&{false false false false false }" interface=lxc0abfb29d889a k8sPodName=openstack/glance-ks-user-ksjnj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d75ff1940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3982 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-user-ksjnj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d75ff1940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3982 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=84478c72-8117-4dff-9409-ea82baa1c6ff,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=84478c72-8117-4dff-9409-ea82baa1c6ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-user-ksjnj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=84478c72-8117-4dff-9409-ea82baa1c6ff;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=84478c72-8117-4dff-9409-ea82baa1c6ff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d75ff1940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3982 identity=45356 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=84478c72-8117-4dff-9409-ea82baa1c6ff,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=84478c72-8117-4dff-9409-ea82baa1c6ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-user-ksjnj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d75ff1940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3982 identity=45356 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-user-ksjnj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5d75ff1940 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3982 identity=45356 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-user-ksjnj subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d75ff1940 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3982 identity=45356 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-user-ksjnj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5d75ff1940 endpointID=3982 k8sNamespace=openstack k8sPodName=glance-ks-user-ksjnj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=84478c72-8117-4dff-9409-ea82baa1c6ff k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=84478c72-8117-4dff-9409-ea82baa1c6ff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5d75ff1940 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3982 identity=45356 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-user-ksjnj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 eae9f980-a6b7-4f89-9137-96f0f8cdbe3b default }" containerID=e923dad5e2c8a9c4287f6b4b4eeb29a323de23cadb2e3fb60aab929aa211d88b datapathConfiguration="&{false false false false false }" interface=lxc730dabdf6520 k8sPodName=openstack/glance-metadefs-load-bgpr2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e923dad5e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-bgpr2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e923dad5e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0ae36b4b-b445-4643-aa16-30d6f893eb8d,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=0ae36b4b-b445-4643-aa16-30d6f893eb8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-bgpr2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0ae36b4b-b445-4643-aa16-30d6f893eb8d;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=0ae36b4b-b445-4643-aa16-30d6f893eb8d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e923dad5e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identity=34605 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0ae36b4b-b445-4643-aa16-30d6f893eb8d,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=0ae36b4b-b445-4643-aa16-30d6f893eb8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-bgpr2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e923dad5e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identity=34605 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-bgpr2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e923dad5e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=97 identity=34605 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-bgpr2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e923dad5e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=97 identity=34605 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-bgpr2 subsys=daemon level=info msg="Delete endpoint request" containerID=e923dad5e2 endpointID=97 k8sNamespace=openstack k8sPodName=glance-metadefs-load-bgpr2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0ae36b4b-b445-4643-aa16-30d6f893eb8d k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=0ae36b4b-b445-4643-aa16-30d6f893eb8d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e923dad5e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=97 identity=34605 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-bgpr2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 4cd80e27-7bd5-4ba1-8d5c-181be9d77791 default }" containerID=9c2c74492b9794d90a2728cbde1762949fdb01d7cd3c67be432eae8f30b45639 datapathConfiguration="&{false false false false false }" interface=lxc20af58fcbaeb k8sPodName=openstack/glance-storage-init-ml7hm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c2c74492b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2470 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-storage-init-ml7hm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c2c74492b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2470 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=67515e1a-fb9f-442f-b4cb-e5ed75b5714e,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=67515e1a-fb9f-442f-b4cb-e5ed75b5714e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-storage-init-ml7hm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=67515e1a-fb9f-442f-b4cb-e5ed75b5714e;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=67515e1a-fb9f-442f-b4cb-e5ed75b5714e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c2c74492b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2470 identity=38131 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=67515e1a-fb9f-442f-b4cb-e5ed75b5714e,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=67515e1a-fb9f-442f-b4cb-e5ed75b5714e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-storage-init-ml7hm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c2c74492b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2470 identity=38131 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-storage-init-ml7hm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9c2c74492b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2470 identity=38131 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-storage-init-ml7hm subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c2c74492b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2470 identity=38131 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-storage-init-ml7hm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9c2c74492b endpointID=2470 k8sNamespace=openstack k8sPodName=glance-storage-init-ml7hm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=67515e1a-fb9f-442f-b4cb-e5ed75b5714e k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=67515e1a-fb9f-442f-b4cb-e5ed75b5714e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9c2c74492b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2470 identity=38131 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-storage-init-ml7hm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 3176bf82-a7e8-4042-a494-9d6e8eea71ba default }" containerID=bd5c6997b4ecbb350c991c58f4cfe00394ef09c86b658770aecf6f9106ef1b39 datapathConfiguration="&{false false false false false }" interface=lxc7bb372e0cee8 k8sPodName=openstack/glance-api-555f8db56f-s56x6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd5c6997b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2467 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-api-555f8db56f-s56x6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd5c6997b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2467 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-api-555f8db56f-s56x6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bd5c6997b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2467 identity=4881 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-api-555f8db56f-s56x6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd5c6997b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2467 identity=4881 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-api-555f8db56f-s56x6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd5c6997b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2467 identity=4881 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-api-555f8db56f-s56x6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd5c6997b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2467 identity=4881 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-api-555f8db56f-s56x6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.17 7b317bac-13ec-4104-b593-3bc4f66e239a default }" containerID=8d267dc2e71a966db92e6447f68d95401195926dc58c54a514c76dfee76e66f5 datapathConfiguration="&{false false false false false }" interface=lxc2459cf85f4bd k8sPodName=openstack/staffeln-api-8688787d47-xgkw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d267dc2e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-8688787d47-xgkw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d267dc2e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-8688787d47-xgkw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d267dc2e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 identity=29513 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-8688787d47-xgkw4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d267dc2e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 identity=29513 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-8688787d47-xgkw4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.238 5ddfda4b-1d7f-4336-b970-6fe4216ad6d9 default }" containerID=1c01193344b45de45f6d04a6bd57c7e712e3a3cc43bae0491a26a81217cdd559 datapathConfiguration="&{false false false false false }" interface=lxcdbf6c6142ee4 k8sPodName=openstack/staffeln-db-init-ndtrh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c01193344 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2637 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/staffeln-db-init-ndtrh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c01193344 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2637 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4a9f7d87-2722-4378-91ab-1090bc265db7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=4a9f7d87-2722-4378-91ab-1090bc265db7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/staffeln-db-init-ndtrh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.236 f7e4846f-a4b8-4da1-a915-ffdfa8ea2509 default }" containerID=b209db0ad8e340f7893a466cd920e92e6ddbc4c045de161df9be51139d89508d datapathConfiguration="&{false false false false false }" interface=lxc9a5673cb6e65 k8sPodName=openstack/staffeln-conductor-56c568764-n49jv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b209db0ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/staffeln-conductor-56c568764-n49jv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b209db0ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/staffeln-conductor-56c568764-n49jv subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=4a9f7d87-2722-4378-91ab-1090bc265db7;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=4a9f7d87-2722-4378-91ab-1090bc265db7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c01193344 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2637 identity=4037 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4a9f7d87-2722-4378-91ab-1090bc265db7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=4a9f7d87-2722-4378-91ab-1090bc265db7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/staffeln-db-init-ndtrh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c01193344 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2637 identity=4037 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/staffeln-db-init-ndtrh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b209db0ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 identity=7385 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/staffeln-conductor-56c568764-n49jv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b209db0ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 identity=7385 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/staffeln-conductor-56c568764-n49jv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d267dc2e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3944 identity=29513 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-8688787d47-xgkw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d267dc2e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3944 identity=29513 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-8688787d47-xgkw4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b209db0ad8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=205 identity=7385 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/staffeln-conductor-56c568764-n49jv subsys=endpoint level=info msg="Successful endpoint creation" containerID=b209db0ad8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=205 identity=7385 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/staffeln-conductor-56c568764-n49jv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1c01193344 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2637 identity=4037 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/staffeln-db-init-ndtrh subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c01193344 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2637 identity=4037 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/staffeln-db-init-ndtrh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1c01193344 endpointID=2637 k8sNamespace=openstack k8sPodName=staffeln-db-init-ndtrh subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=4a9f7d87-2722-4378-91ab-1090bc265db7 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=4a9f7d87-2722-4378-91ab-1090bc265db7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=1c01193344 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2637 identity=4037 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/staffeln-db-init-ndtrh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 7783349c-358c-4c98-9005-1e11d594bb96 default }" containerID=6803a605e15a1db0af2b021ed1918f19966a6d5da5c46b2e4034384b560b8083 datapathConfiguration="&{false false false false false }" interface=lxc7def049de3e3 k8sPodName=openstack/staffeln-db-sync-5kgmf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6803a605e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2670 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-db-sync-5kgmf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6803a605e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2670 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=08eb6bd8-ba8e-44a8-91f0-84b345a798e5,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=08eb6bd8-ba8e-44a8-91f0-84b345a798e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-db-sync-5kgmf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=08eb6bd8-ba8e-44a8-91f0-84b345a798e5;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=08eb6bd8-ba8e-44a8-91f0-84b345a798e5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6803a605e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2670 identity=53530 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=08eb6bd8-ba8e-44a8-91f0-84b345a798e5,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=08eb6bd8-ba8e-44a8-91f0-84b345a798e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-db-sync-5kgmf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6803a605e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2670 identity=53530 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-db-sync-5kgmf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6803a605e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2670 identity=53530 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-db-sync-5kgmf subsys=endpoint level=info msg="Successful endpoint creation" containerID=6803a605e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2670 identity=53530 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-db-sync-5kgmf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager