level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="857.831µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="50.081µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="979.386µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.59µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=105.454998ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="22.881µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="22.991µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="72.002µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="104.873µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="99.743µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="621.836µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.72µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.024509ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=5.801899ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="54.021µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="47.091µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="227.896µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="132.323µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="84.392µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=53.526055ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="105.962µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="10.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="4.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.123.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.694113ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.893081ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="29.521µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.288095ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.15µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="24.001µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="17.49µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="65.621µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="445.651µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.561µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="251.677µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="955.994µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.221742ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.76µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="15.601µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.123 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.123 ipAddr.ipv6="" k8sNodeIP=199.19.213.123 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.123" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.39" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.123" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.123} {CiliumInternalIP 10.0.0.39}] 10.0.0.0/24 [] [] 10.0.0.51 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:33727" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.674771392s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="14.43µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="8.05µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="40.941µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="40.962µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2988 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2988 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2988 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.707822316s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=318.820457ms file-path=/var/run/cilium/state/templates/81853e5649625d5e5226d87f8efa845a1aa72cbc41b19de50fbd7e20d3914f2e/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2988 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 a493a5ad-ca0b-4183-877a-0c2c6563addf default }" containerID=184261c659a7f34e7f1339564767506f35eef38748cd9d1f3ba487a13ebdb4eb datapathConfiguration="&{false false false false false }" interface=lxc79e3e8b65a55 k8sPodName=kube-system/coredns-7c96b6546b-v84pb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=184261c659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v84pb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=184261c659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v84pb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=184261c659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identity=50815 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v84pb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=184261c659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identity=50815 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v84pb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 d47f8906-bf60-4845-a6a6-822908087767 default }" containerID=d93b871b283aba83926b0eb19800f582ba88e15913bb564643942f765e18836b datapathConfiguration="&{false false false false false }" interface=lxc780c6dc60075 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cxdl2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d93b871b28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3339 ipv4=10.0.0.85 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cxdl2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d93b871b28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3339 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=12f1b80a-7c90-47a9-89b9-6b8b34927544,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=12f1b80a-7c90-47a9-89b9-6b8b34927544,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.85 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cxdl2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=12f1b80a-7c90-47a9-89b9-6b8b34927544;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=12f1b80a-7c90-47a9-89b9-6b8b34927544;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d93b871b28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3339 identity=19758 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=12f1b80a-7c90-47a9-89b9-6b8b34927544,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=12f1b80a-7c90-47a9-89b9-6b8b34927544,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.85 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cxdl2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d93b871b28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3339 identity=19758 ipv4=10.0.0.85 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cxdl2 subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 ipv4=10.0.0.51 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identityLabels="reserved:health" ipv4=10.0.0.51 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identity=4 identityLabels="reserved:health" ipv4=10.0.0.51 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.175743731s file-path=/var/run/cilium/state/templates/57bbc733e2c0dfbcced1aaf4c9110cfd710ef511548c8784a0ad8f93c892aa31/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=506 identity=4 ipv4=10.0.0.51 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d93b871b28 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3339 identity=19758 ipv4=10.0.0.85 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cxdl2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=184261c659 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=256 identity=50815 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v84pb subsys=endpoint level=info msg="Successful endpoint creation" containerID=184261c659 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=256 identity=50815 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v84pb subsys=daemon level=info msg="Successful endpoint creation" containerID=d93b871b28 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3339 identity=19758 ipv4=10.0.0.85 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cxdl2 subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d93b871b28 endpointID=3339 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-cxdl2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=12f1b80a-7c90-47a9-89b9-6b8b34927544 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=12f1b80a-7c90-47a9-89b9-6b8b34927544 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=d93b871b28 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3339 identity=19758 ipv4=10.0.0.85 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cxdl2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 8f8ab8eb-d202-4e29-8766-23fa694bf33e default }" containerID=f61c177fcf8da720c22ad59f967038436fb12f6b7c3767668d5c826dc65a61cc datapathConfiguration="&{false false false false false }" interface=lxcb9c0745326fd k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b4dnt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f61c177fcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b4dnt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f61c177fcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b4dnt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f61c177fcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identity=38710 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b4dnt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f61c177fcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identity=38710 ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b4dnt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f61c177fcf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1916 identity=38710 ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b4dnt subsys=endpoint level=info msg="Successful endpoint creation" containerID=f61c177fcf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1916 identity=38710 ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b4dnt subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2988 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02988 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02988 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02988 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02988:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2988 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 1808037b-9f69-462e-892c-1d8380c7bfcf default }" containerID=e3d4993ba0d4e748e65253efe99e81d0cf3197c1253381283097cb042044c3cd datapathConfiguration="&{false false false false false }" interface=lxcdee0f1b25a11 k8sPodName=kube-system/coredns-67659f764b-cg8sz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3d4993ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1661 ipv4=10.0.0.185 ipv6= k8sPodName=kube-system/coredns-67659f764b-cg8sz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3d4993ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1661 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.185 ipv6= k8sPodName=kube-system/coredns-67659f764b-cg8sz subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e3d4993ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1661 identity=50815 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.185 ipv6= k8sPodName=kube-system/coredns-67659f764b-cg8sz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3d4993ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1661 identity=50815 ipv4=10.0.0.185 ipv6= k8sPodName=kube-system/coredns-67659f764b-cg8sz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3d4993ba0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1661 identity=50815 ipv4=10.0.0.185 ipv6= k8sPodName=kube-system/coredns-67659f764b-cg8sz subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3d4993ba0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1661 identity=50815 ipv4=10.0.0.185 ipv6= k8sPodName=kube-system/coredns-67659f764b-cg8sz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.124 3a812bb0-3019-41fc-94dc-16c9edc49158 default }" containerID=7ba87c858d39105462f401e3e160bc85d3b4de53c6f4ac73513087b510e2aa55 datapathConfiguration="&{false false false false false }" interface=lxc1dae25aa29ed k8sPodName=kube-system/coredns-67659f764b-pl8nz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ba87c858d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 ipv4=10.0.0.124 ipv6= k8sPodName=kube-system/coredns-67659f764b-pl8nz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ba87c858d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.124 ipv6= k8sPodName=kube-system/coredns-67659f764b-pl8nz subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7ba87c858d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identity=50815 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.124 ipv6= k8sPodName=kube-system/coredns-67659f764b-pl8nz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ba87c858d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identity=50815 ipv4=10.0.0.124 ipv6= k8sPodName=kube-system/coredns-67659f764b-pl8nz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ba87c858d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2147 identity=50815 ipv4=10.0.0.124 ipv6= k8sPodName=kube-system/coredns-67659f764b-pl8nz subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ba87c858d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2147 identity=50815 ipv4=10.0.0.124 ipv6= k8sPodName=kube-system/coredns-67659f764b-pl8nz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.2 7c2d7f88-bffe-4ce9-9b7c-a301d33c5779 default }" containerID=cca4e8f0037a297fbb35e535e3910e94a10dd26b304c03627ab61876ee1057e7 datapathConfiguration="&{false false false false false }" interface=lxc80d0ac3fe90b k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mh2kv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cca4e8f003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=702 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mh2kv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cca4e8f003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=702 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mh2kv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cca4e8f003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=702 identity=17193 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mh2kv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cca4e8f003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=702 identity=17193 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mh2kv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cca4e8f003 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=702 identity=17193 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mh2kv subsys=endpoint level=info msg="Successful endpoint creation" containerID=cca4e8f003 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=702 identity=17193 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mh2kv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=184261c659 endpointID=256 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-v84pb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=184261c659 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=256 identity=50815 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v84pb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 afb0ebd5-e729-4078-8c54-ea9c71048476 default }" containerID=5133fa3398ff2a0c621fd6c716b45c9c06765d2ecdfb4ccd7741a62e34a32dbe datapathConfiguration="&{false false false false false }" interface=lxcb079c6a11996 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fghlf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5133fa3398 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fghlf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5133fa3398 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fghlf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5133fa3398 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identity=45474 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fghlf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5133fa3398 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identity=45474 ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fghlf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5133fa3398 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=887 identity=45474 ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fghlf subsys=endpoint level=info msg="Successful endpoint creation" containerID=5133fa3398 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=887 identity=45474 ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fghlf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.234 c0e0c591-f181-4d60-b67f-90d558917835 default }" containerID=a7f115189e249b0ddac26a8bd78583c618e8f41bfccab0a8d9eb897ab02406ac datapathConfiguration="&{false false false false false }" interface=lxc02021188c824 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-czc5n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7f115189e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-czc5n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7f115189e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-czc5n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.117 1a0d4eb1-01fe-4ada-a6af-3766f31d410a default }" containerID=89b5856317fb37b1a72d88223d0de84daa42bae3a0a47e7927a8ace2da715a1e datapathConfiguration="&{false false false false false }" interface=lxc966a3f50057f k8sPodName=cert-manager/cert-manager-75c4c745bc-trhtw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89b5856317 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-trhtw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89b5856317 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-trhtw subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7f115189e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identity=55643 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-czc5n oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=a7f115189e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identity=55643 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-czc5n subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89b5856317 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=17234 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-trhtw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89b5856317 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=17234 ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-trhtw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7f115189e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=452 identity=55643 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-czc5n subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7f115189e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=452 identity=55643 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-czc5n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=89b5856317 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=612 identity=17234 ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-trhtw subsys=endpoint level=info msg="Successful endpoint creation" containerID=89b5856317 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=612 identity=17234 ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-trhtw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.5 c7da3c42-f395-4d51-8b0c-63368df366bf default }" containerID=713d5c639dea547f407aca800950bb7f14d879222d1558f6ad5f22ea8ad1265b datapathConfiguration="&{false false false false false }" interface=lxcee97cc1e0d33 k8sPodName=cert-manager/cert-manager-startupapicheck-ql4xn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=713d5c639d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ql4xn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=713d5c639d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=81385f39-8770-418e-868e-1cbdef24b50a,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=81385f39-8770-418e-868e-1cbdef24b50a,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ql4xn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=81385f39-8770-418e-868e-1cbdef24b50a;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=81385f39-8770-418e-868e-1cbdef24b50a;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=713d5c639d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identity=18323 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=81385f39-8770-418e-868e-1cbdef24b50a,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=81385f39-8770-418e-868e-1cbdef24b50a,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ql4xn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=713d5c639d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identity=18323 ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ql4xn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=713d5c639d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2380 identity=18323 ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ql4xn subsys=endpoint level=info msg="Successful endpoint creation" containerID=713d5c639d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2380 identity=18323 ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ql4xn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=713d5c639d endpointID=2380 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-ql4xn subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=81385f39-8770-418e-868e-1cbdef24b50a k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=81385f39-8770-418e-868e-1cbdef24b50a k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=713d5c639d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2380 identity=18323 ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ql4xn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 ad638ab1-c50e-44f5-8d95-65aeb910f072 default }" containerID=1f9a06e153100ace82cd79109423c084d33409af4471001a5c13f5b151ee19e3 datapathConfiguration="&{false false false false false }" interface=lxc17e12230248f k8sPodName=ingress-nginx/ingress-nginx-admission-create-x4m8m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f9a06e153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=261 ipv4=10.0.0.56 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-x4m8m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f9a06e153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=261 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cf0dd9be-ca98-4188-8ef6-2db94376db9d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=cf0dd9be-ca98-4188-8ef6-2db94376db9d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.56 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-x4m8m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1f9a06e153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=261 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.56 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-x4m8m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=cf0dd9be-ca98-4188-8ef6-2db94376db9d;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=cf0dd9be-ca98-4188-8ef6-2db94376db9d;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f9a06e153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=261 identity=4227 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cf0dd9be-ca98-4188-8ef6-2db94376db9d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=cf0dd9be-ca98-4188-8ef6-2db94376db9d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.56 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-x4m8m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f9a06e153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=261 identity=4227 ipv4=10.0.0.56 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-x4m8m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f9a06e153 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=261 identity=4227 ipv4=10.0.0.56 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-x4m8m subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f9a06e153 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=261 identity=4227 ipv4=10.0.0.56 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-x4m8m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1f9a06e153 endpointID=261 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-x4m8m subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=cf0dd9be-ca98-4188-8ef6-2db94376db9d k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=cf0dd9be-ca98-4188-8ef6-2db94376db9d k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=1f9a06e153 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=261 identity=4227 ipv4=10.0.0.56 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-x4m8m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 e9bb1a11-88b7-4a41-bc4d-201f35f18b99 default }" containerID=f4500e811e53ab2159072269035f68e15af5de50a2577f6323990549849b5b2e datapathConfiguration="&{false false false false false }" interface=lxc0d30e27e1a82 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ff9bs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4500e811e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 ipv4=10.0.0.45 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ff9bs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4500e811e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.45 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ff9bs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4500e811e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 identity=29791 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.45 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ff9bs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4500e811e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 identity=29791 ipv4=10.0.0.45 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ff9bs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4500e811e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2698 identity=29791 ipv4=10.0.0.45 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ff9bs subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4500e811e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2698 identity=29791 ipv4=10.0.0.45 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ff9bs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.125 a115b147-a6c5-455c-8124-6abcf4804425 default }" containerID=dfb9a008ac78348474404b6d5c14053c25f565e03c8e83fe47fe129dc2d7ae46 datapathConfiguration="&{false false false false false }" interface=lxc2bcfd6ee4e37 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hw67p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfb9a008ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=982 ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hw67p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfb9a008ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=982 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a0405f50-4d27-4b95-9289-1229c0066d57,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=a0405f50-4d27-4b95-9289-1229c0066d57,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hw67p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=a0405f50-4d27-4b95-9289-1229c0066d57;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=a0405f50-4d27-4b95-9289-1229c0066d57;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dfb9a008ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=982 identity=2876 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a0405f50-4d27-4b95-9289-1229c0066d57,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=a0405f50-4d27-4b95-9289-1229c0066d57,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hw67p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dfb9a008ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=982 identity=2876 ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hw67p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dfb9a008ac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=982 identity=2876 ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hw67p subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfb9a008ac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=982 identity=2876 ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hw67p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dfb9a008ac endpointID=982 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-hw67p subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=a0405f50-4d27-4b95-9289-1229c0066d57 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=a0405f50-4d27-4b95-9289-1229c0066d57 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=dfb9a008ac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=982 identity=2876 ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hw67p subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=32e30ed0-037b-473b-880d-215fbc1aca4c] Description:}]" policyAddRequest=da2b39e6-1c15-4b1b-8a9a-817305d1ef4c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=da2b39e6-1c15-4b1b-8a9a-817305d1ef4c policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6eb2223a-4351-4d65-83c9-535319c1d59a] Description:}]" policyAddRequest=fd3df0de-1df6-4017-b839-5169067959f4 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=fd3df0de-1df6-4017-b839-5169067959f4 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.88 6240b2f0-312f-4218-9d5e-d0a2eadbcff4 default }" containerID=db6e82f53c3132df788b487a55bf07b0544cce72bd2dc05a33f19fc40ce5841f datapathConfiguration="&{false false false false false }" interface=lxcfe8111a849dd k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-thfpz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db6e82f53c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-thfpz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db6e82f53c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-thfpz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db6e82f53c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identity=47539 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-thfpz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db6e82f53c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identity=47539 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-thfpz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=db6e82f53c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1308 identity=47539 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-thfpz subsys=endpoint level=info msg="Successful endpoint creation" containerID=db6e82f53c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1308 identity=47539 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-thfpz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.232 78783047-2812-4f10-88ee-5cd4e56a31f9 default }" containerID=6db335d2e1d85e72ce5a9a766a134da6e3ee132c493b45303aea9468394aa11f datapathConfiguration="&{false false false false false }" interface=lxc746ee7a9f802 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-m6pb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6db335d2e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-m6pb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6db335d2e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-m6pb9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6db335d2e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 identity=30817 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-m6pb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6db335d2e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 identity=30817 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-m6pb9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6db335d2e1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=850 identity=30817 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-m6pb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6db335d2e1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=850 identity=30817 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-m6pb9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.43 2225b531-c295-4c72-887c-26c2ddb139a5 default }" containerID=0cbc991674c6e39a29623455c4b56aac69ba004651d78d377194de900b090238 datapathConfiguration="&{false false false false false }" interface=lxc84a6512ae727 k8sPodName=openstack/pxc-operator-69cb5bbdb9-ntk59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cbc991674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3552 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ntk59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cbc991674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3552 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ntk59 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cbc991674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3552 identity=13302 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ntk59 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cbc991674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3552 identity=13302 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ntk59 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0cbc991674 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3552 identity=13302 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ntk59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cbc991674 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3552 identity=13302 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ntk59 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.30 d55d28e1-b614-4173-8f2e-41588d2057be default }" containerID=a9933b4c671ea33f041e2f167c46e3916817361033e3847a94a26f604fafe111 datapathConfiguration="&{false false false false false }" interface=lxcf459d7cd872e k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9933b4c67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9933b4c67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a9933b4c67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.30 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9933b4c67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 identity=18528 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9933b4c67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 identity=18528 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 c274014e-dfa9-48d0-ad7a-2ca8d7c18a91 default }" containerID=b4de73744820026099db4e7ba2bbb7bf2c2f64d7f3446c5ef4d9f3588c875746 datapathConfiguration="&{false false false false false }" interface=lxc62fd491aaa60 k8sPodName=local-path-storage/helper-pod-create-pvc-71b79afe-6b77-41af-b65b-c569a050ce27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4de737448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2878 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71b79afe-6b77-41af-b65b-c569a050ce27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4de737448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2878 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71b79afe-6b77-41af-b65b-c569a050ce27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4de737448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2878 identity=15871 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71b79afe-6b77-41af-b65b-c569a050ce27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4de737448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2878 identity=15871 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71b79afe-6b77-41af-b65b-c569a050ce27 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9933b4c67 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=495 identity=18528 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9933b4c67 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=495 identity=18528 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b4de737448 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2878 identity=15871 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71b79afe-6b77-41af-b65b-c569a050ce27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4de737448 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2878 identity=15871 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71b79afe-6b77-41af-b65b-c569a050ce27 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4de737448 endpointID=2878 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-71b79afe-6b77-41af-b65b-c569a050ce27 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b4de737448 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2878 identity=15871 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71b79afe-6b77-41af-b65b-c569a050ce27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 756593d2-fc02-41f6-ae2a-d42dd8b3fa3c default }" containerID=76712d5ce13e74dfa64c1e3b9ffc0c3cf1da9d9a18b4dbcad3cb28679752adef datapathConfiguration="&{false false false false false }" interface=lxc1292405e75fd k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76712d5ce1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2035 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76712d5ce1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2035 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=76712d5ce1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2035 identity=26074 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76712d5ce1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2035 identity=26074 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76712d5ce1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2035 identity=26074 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=76712d5ce1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2035 identity=26074 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=89de5b28-0ff4-427a-aab7-774cd646f662] Description:}]" policyAddRequest=9460401c-b296-46ae-af4e-bfd3868cb699 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=9460401c-b296-46ae-af4e-bfd3868cb699 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.50 120acde1-582d-4a20-9802-4e3cbcbdd144 default }" containerID=8200312da64ec21a6f86edb6f0b385fa0e37c87d7e9b878ff3d871a220c733c9 datapathConfiguration="&{false false false false false }" interface=lxc0078354d8475 k8sPodName=local-path-storage/helper-pod-create-pvc-b731a986-2a18-4f34-a369-cd9ca601713d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8200312da6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b731a986-2a18-4f34-a369-cd9ca601713d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8200312da6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b731a986-2a18-4f34-a369-cd9ca601713d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8200312da6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 identity=15871 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b731a986-2a18-4f34-a369-cd9ca601713d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8200312da6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 identity=15871 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b731a986-2a18-4f34-a369-cd9ca601713d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8200312da6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=659 identity=15871 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b731a986-2a18-4f34-a369-cd9ca601713d subsys=endpoint level=info msg="Successful endpoint creation" containerID=8200312da6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=659 identity=15871 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b731a986-2a18-4f34-a369-cd9ca601713d subsys=daemon level=info msg="Delete endpoint request" containerID=8200312da6 endpointID=659 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b731a986-2a18-4f34-a369-cd9ca601713d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8200312da6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=659 identity=15871 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b731a986-2a18-4f34-a369-cd9ca601713d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 fac09757-03b9-433e-8811-8334ba05728a default }" containerID=2ebe3a47c3d7abfd3e2747f6af073bad979b83248892efc7b3ddf606933d108e datapathConfiguration="&{false false false false false }" interface=lxc41fb3ac4567a k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ebe3a47c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2118 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ebe3a47c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2118 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2ebe3a47c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2118 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ebe3a47c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2118 identity=49562 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ebe3a47c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2118 identity=49562 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ebe3a47c3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2118 identity=49562 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ebe3a47c3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2118 identity=49562 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=4bb445d5-3e77-4000-b5de-e7505eed78a2] Description:}]" policyAddRequest=665e6591-9df8-4dfb-9fa6-bd76974f07c3 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=665e6591-9df8-4dfb-9fa6-bd76974f07c3 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.125 fdb00151-cfdf-4b09-9a59-3fa396de8271 default }" containerID=d9a6b7ee15aaf652a1affe4a9da9999e6fd1966fd5ad491264cbcc13eab3e905 datapathConfiguration="&{false false false false false }" interface=lxcf54f5a3eb019 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9a6b7ee15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=321 ipv4=10.0.0.125 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9a6b7ee15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=321 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.125 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9a6b7ee15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=321 identity=31223 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.125 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9a6b7ee15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=321 identity=31223 ipv4=10.0.0.125 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d9a6b7ee15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=321 identity=31223 ipv4=10.0.0.125 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9a6b7ee15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=321 identity=31223 ipv4=10.0.0.125 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.007361992235583752 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.193 96a7eeb7-f71b-43cc-a8ce-c897f2d25fec default }" containerID=7e9039ced167c45742cf3e493357203453d1398cab3407baab797c269bcc355c datapathConfiguration="&{false false false false false }" interface=lxc355a653c1ae1 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7l45h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e9039ced1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7l45h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e9039ced1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7l45h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7e9039ced1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7l45h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e9039ced1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 identity=24108 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7l45h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e9039ced1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 identity=24108 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7l45h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 4365b841-f719-4821-b641-4a29e1a07b4f default }" containerID=596e6ba9bea857e22759dd4873cddad17e829becb6d9e5f5a77b748bdbf328d1 datapathConfiguration="&{false false false false false }" interface=lxc1133ebefd5b6 k8sPodName=monitoring/node-feature-discovery-worker-4cklz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=596e6ba9be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3230 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-4cklz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=596e6ba9be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3230 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-4cklz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=596e6ba9be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3230 identity=55083 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-4cklz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=596e6ba9be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3230 identity=55083 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-4cklz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e9039ced1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1328 identity=24108 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7l45h subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e9039ced1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1328 identity=24108 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7l45h subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.33 35a3be50-5aa9-43ba-a95c-3aad8d350668 default }" containerID=527371142c3150615283b808ba3fa746102011c6266f8b7a55baa6747a91e852 datapathConfiguration="&{false false false false false }" interface=lxc85e755b68abf k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-c99w2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=527371142c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3036 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-c99w2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=527371142c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3036 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-c99w2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=527371142c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3036 identity=52009 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-c99w2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=527371142c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3036 identity=52009 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-c99w2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=596e6ba9be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3230 identity=55083 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-4cklz subsys=endpoint level=info msg="Successful endpoint creation" containerID=596e6ba9be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3230 identity=55083 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-4cklz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=527371142c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3036 identity=52009 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-c99w2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=527371142c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3036 identity=52009 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-c99w2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 bc5e7d92-78f8-4baa-9c07-ef45dab504c0 default }" containerID=41dbf69e6d11936675f4e02d43ab9afc572d6458ec3082a73efb490ab7fdd7ab datapathConfiguration="&{false false false false false }" interface=lxc611bc4d3c9f5 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8wzcq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41dbf69e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8wzcq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41dbf69e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8wzcq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41dbf69e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 identity=58377 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8wzcq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41dbf69e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 identity=58377 ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8wzcq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=41dbf69e6d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1446 identity=58377 ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8wzcq subsys=endpoint level=info msg="Successful endpoint creation" containerID=41dbf69e6d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1446 identity=58377 ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8wzcq subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2988 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02988 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02988 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02988 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02988:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2988 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 364b5be7-59f0-4a16-b651-c784bc8ee7f0 default }" containerID=d552bec5a5747f2df1c4eb5fdcfe1fda1192f3cc9a59799c8d26c27a12633788 datapathConfiguration="&{false false false false false }" interface=lxc9c845b48abf5 k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jjb2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d552bec5a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jjb2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d552bec5a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=cfcb6a05-6e7e-4f3c-8140-5e20ea429149,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=cfcb6a05-6e7e-4f3c-8140-5e20ea429149,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jjb2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=cfcb6a05-6e7e-4f3c-8140-5e20ea429149;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=cfcb6a05-6e7e-4f3c-8140-5e20ea429149;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d552bec5a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 identity=35635 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=cfcb6a05-6e7e-4f3c-8140-5e20ea429149,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=cfcb6a05-6e7e-4f3c-8140-5e20ea429149,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jjb2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d552bec5a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 identity=35635 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jjb2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d552bec5a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1766 identity=35635 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jjb2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d552bec5a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1766 identity=35635 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jjb2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d552bec5a5 endpointID=1766 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-8jjb2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=cfcb6a05-6e7e-4f3c-8140-5e20ea429149 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=cfcb6a05-6e7e-4f3c-8140-5e20ea429149 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d552bec5a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1766 identity=35635 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jjb2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 d9668f4a-2c62-4790-bafd-f3035481ea5a default }" containerID=a47abb2cfccc93367a16c9919c7ecb344b13e8a5cb1b7432284c499cda2607b1 datapathConfiguration="&{false false false false false }" interface=lxca5b63378a4bc k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-fgvkq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a47abb2cfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-fgvkq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a47abb2cfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-fgvkq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a47abb2cfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 identity=21596 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-fgvkq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a47abb2cfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 identity=21596 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-fgvkq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 1b66be2c-e85f-4eca-873f-7326acaa0f0c default }" containerID=61535ec983f185fb3aacc97ec73f69131bd35d874bc0c50e892c59f144471780 datapathConfiguration="&{false false false false false }" interface=lxcf40fcb032fc2 k8sPodName=monitoring/kube-prometheus-stack-grafana-c7c6ddc89-qbd58 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.143 322c85bf-975a-4348-945a-4545a084384e default }" containerID=1cc36e784736d183581cfc7eea7416acc2a0c14ccb6790d6faeeb98087adffcd datapathConfiguration="&{false false false false false }" interface=lxcab51d6bbc9b1 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x58gx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61535ec983 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c7c6ddc89-qbd58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61535ec983 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c7c6ddc89-qbd58 subsys=endpoint level=info msg="New endpoint" containerID=1cc36e7847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x58gx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=1cc36e7847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x58gx subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61535ec983 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identity=63480 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c7c6ddc89-qbd58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61535ec983 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identity=63480 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c7c6ddc89-qbd58 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1cc36e7847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=10467 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x58gx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1cc36e7847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=10467 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x58gx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a47abb2cfc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1083 identity=21596 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-fgvkq subsys=endpoint level=info msg="Successful endpoint creation" containerID=a47abb2cfc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1083 identity=21596 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-fgvkq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=61535ec983 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2342 identity=63480 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c7c6ddc89-qbd58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=61535ec983 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2342 identity=63480 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c7c6ddc89-qbd58 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1cc36e7847 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=782 identity=10467 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x58gx subsys=endpoint level=info msg="Successful endpoint creation" containerID=1cc36e7847 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=782 identity=10467 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x58gx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.110 ff254d77-d208-4f30-8efe-43c4a0e1840c default }" containerID=287d6137cbac008ee969d5f087c17fa67d107c9f1383fac54650ad9b30eca683 datapathConfiguration="&{false false false false false }" interface=lxc2d03eb3d2838 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xz8j6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=287d6137cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xz8j6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=287d6137cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=da79522f-c42b-4c12-bbd4-3eb78bb414e5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=da79522f-c42b-4c12-bbd4-3eb78bb414e5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xz8j6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=da79522f-c42b-4c12-bbd4-3eb78bb414e5;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=da79522f-c42b-4c12-bbd4-3eb78bb414e5;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=287d6137cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identity=4114 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=da79522f-c42b-4c12-bbd4-3eb78bb414e5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=da79522f-c42b-4c12-bbd4-3eb78bb414e5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xz8j6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=287d6137cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identity=4114 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xz8j6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=287d6137cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1162 identity=4114 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xz8j6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=287d6137cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1162 identity=4114 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xz8j6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.201 4d4ac1e3-d0e5-4492-bf79-c0645e0298a8 default }" containerID=38e6c8aff2d00830b9ac4c2112ed49f5a552dfe24913f4f98510886730cca815 datapathConfiguration="&{false false false false false }" interface=lxcaf3d6078b990 k8sPodName=local-path-storage/helper-pod-create-pvc-18229016-1657-4082-a210-46bad1f1a1d2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38e6c8aff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-18229016-1657-4082-a210-46bad1f1a1d2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38e6c8aff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-18229016-1657-4082-a210-46bad1f1a1d2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38e6c8aff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 identity=15871 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-18229016-1657-4082-a210-46bad1f1a1d2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38e6c8aff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 identity=15871 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-18229016-1657-4082-a210-46bad1f1a1d2 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=38e6c8aff2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2078 identity=15871 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-18229016-1657-4082-a210-46bad1f1a1d2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=38e6c8aff2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2078 identity=15871 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-18229016-1657-4082-a210-46bad1f1a1d2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.161 e3b7c501-3caa-4690-a9b9-137914aacdee default }" containerID=c67e0158cadff2f01d9a9d15798c81b4b41afd001dd072a1e1e72664ffc35cdf datapathConfiguration="&{false false false false false }" interface=lxc5985b0217888 k8sPodName=local-path-storage/helper-pod-create-pvc-3da479fb-113c-4f08-aeca-0bc5d9ea92c3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c67e0158ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3da479fb-113c-4f08-aeca-0bc5d9ea92c3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c67e0158ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3da479fb-113c-4f08-aeca-0bc5d9ea92c3 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c67e0158ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 identity=15871 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3da479fb-113c-4f08-aeca-0bc5d9ea92c3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c67e0158ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 identity=15871 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3da479fb-113c-4f08-aeca-0bc5d9ea92c3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c67e0158ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=497 identity=15871 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3da479fb-113c-4f08-aeca-0bc5d9ea92c3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c67e0158ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=497 identity=15871 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3da479fb-113c-4f08-aeca-0bc5d9ea92c3 subsys=daemon level=info msg="Delete endpoint request" containerID=287d6137cb endpointID=1162 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-xz8j6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=da79522f-c42b-4c12-bbd4-3eb78bb414e5 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=da79522f-c42b-4c12-bbd4-3eb78bb414e5 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=287d6137cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1162 identity=4114 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xz8j6 subsys=endpoint level=info msg="Delete endpoint request" containerID=c67e0158ca endpointID=497 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3da479fb-113c-4f08-aeca-0bc5d9ea92c3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=38e6c8aff2 endpointID=2078 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-18229016-1657-4082-a210-46bad1f1a1d2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c67e0158ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=497 identity=15871 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3da479fb-113c-4f08-aeca-0bc5d9ea92c3 subsys=endpoint level=info msg="Removed endpoint" containerID=38e6c8aff2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2078 identity=15871 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-18229016-1657-4082-a210-46bad1f1a1d2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 8d5fc152-955e-4f0f-a3d6-e90a249b6b5b default }" containerID=bd158a9559df3d25b1b0de0f81c788151724dd459467f53eae8a2a29a439f666 datapathConfiguration="&{false false false false false }" interface=lxcccf7b3e59f22 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd158a9559 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd158a9559 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd158a9559 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identity=58589 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd158a9559 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identity=58589 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bd158a9559 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=521 identity=58589 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd158a9559 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=521 identity=58589 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.169 389d79d0-815c-4cbb-ba49-576bca863966 default }" containerID=4a17e38c7e56ee4c6652afa36e83127926c6b1e69f5462319458d6ab082c98fb datapathConfiguration="&{false false false false false }" interface=lxcb8219a123482 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a17e38c7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2783 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a17e38c7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2783 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a17e38c7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2783 identity=20475 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a17e38c7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2783 identity=20475 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a17e38c7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2783 identity=20475 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a17e38c7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2783 identity=20475 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.248 0b404b0b-3823-4c95-a167-a7d0bd5ca23a default }" containerID=63e6b7a467a6ee6896579f308416f720bdc13a9137203cbcf0824b4f87eaaeb9 datapathConfiguration="&{false false false false false }" interface=lxc13cbfdc2cfab k8sPodName=monitoring/loki-gateway-cf54cb88c-5frz2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63e6b7a467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5frz2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63e6b7a467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5frz2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=63e6b7a467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5frz2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63e6b7a467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 identity=7061 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5frz2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63e6b7a467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 identity=7061 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5frz2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 fb7b73c5-1a97-4b61-a63b-73df3e8deec3 default }" containerID=02e888f9d030f45f4915b7c11cb96796938fbf2cc9bba1a5540ffca1c526aefe datapathConfiguration="&{false false false false false }" interface=lxcfddacd92bd80 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02e888f9d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=713 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02e888f9d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=713 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02e888f9d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=713 identity=30424 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02e888f9d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=713 identity=30424 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 d8d5b7da-bc58-4b2d-a6f5-4c96365f2207 default }" containerID=0d3cd68f9e259f8c88ebdd565e4dbac4496a1438835f015c713909b2b5d38daf datapathConfiguration="&{false false false false false }" interface=lxc1d4f63a070c4 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d3cd68f9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d3cd68f9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d3cd68f9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 identity=11796 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d3cd68f9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 identity=11796 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63e6b7a467 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2086 identity=7061 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5frz2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=63e6b7a467 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2086 identity=7061 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5frz2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=02e888f9d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=713 identity=30424 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=02e888f9d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=713 identity=30424 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0d3cd68f9e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2263 identity=11796 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d3cd68f9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2263 identity=11796 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 ec1b7b60-00da-4a24-8b4f-d79f41e3fcfd default }" containerID=e19d8c69307feb42a79911e139c5eb207a6b92c486f4b3c5a2b362f56074047b datapathConfiguration="&{false false false false false }" interface=lxc8076e4a23dfe k8sPodName=local-path-storage/helper-pod-create-pvc-ede5ae47-9dee-48cd-a054-a1e522d94ebc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e19d8c6930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ede5ae47-9dee-48cd-a054-a1e522d94ebc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e19d8c6930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ede5ae47-9dee-48cd-a054-a1e522d94ebc subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e19d8c6930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 identity=15871 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ede5ae47-9dee-48cd-a054-a1e522d94ebc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e19d8c6930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 identity=15871 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ede5ae47-9dee-48cd-a054-a1e522d94ebc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e19d8c6930 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2170 identity=15871 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ede5ae47-9dee-48cd-a054-a1e522d94ebc subsys=endpoint level=info msg="Successful endpoint creation" containerID=e19d8c6930 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2170 identity=15871 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ede5ae47-9dee-48cd-a054-a1e522d94ebc subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.213 16bd7953-eeaf-427c-bbc9-a5635b941947 default }" containerID=891ba2f364f1910df9abdb79bd7d41978a411ef1808b19cb8ab726d3d285f550 datapathConfiguration="&{false false false false false }" interface=lxca5fad18e98dd k8sPodName=monitoring/vector-bwr7n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=891ba2f364 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-bwr7n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=891ba2f364 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-bwr7n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=891ba2f364 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identity=6670 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-bwr7n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=891ba2f364 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identity=6670 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-bwr7n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=891ba2f364 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1204 identity=6670 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-bwr7n subsys=endpoint level=info msg="Successful endpoint creation" containerID=891ba2f364 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1204 identity=6670 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-bwr7n subsys=daemon level=info msg="Delete endpoint request" containerID=e19d8c6930 endpointID=2170 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ede5ae47-9dee-48cd-a054-a1e522d94ebc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e19d8c6930 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2170 identity=15871 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ede5ae47-9dee-48cd-a054-a1e522d94ebc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 b8f7375f-391f-4c60-9c64-8b315ed1ad07 default }" containerID=7571dc16fa5c3afba893eb59bb0d15c8d47368f55d82fdd2e04053164a594ae4 datapathConfiguration="&{false false false false false }" interface=lxc5a30b12b99cf k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7571dc16fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7571dc16fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7571dc16fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7571dc16fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identity=3355 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7571dc16fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identity=3355 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7571dc16fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1050 identity=3355 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7571dc16fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1050 identity=3355 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.179 afee7f33-505c-49b1-813c-3fd027292f68 default }" containerID=94a9e27686354d58ebe8e9c7e7ae294f95d6a56973cdd26b8b56deac74bcce77 datapathConfiguration="&{false false false false false }" interface=lxc26126251c9b5 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-77f49 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94a9e27686 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-77f49 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94a9e27686 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-77f49 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94a9e27686 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 identity=3015 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-77f49 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94a9e27686 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 identity=3015 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-77f49 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94a9e27686 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=392 identity=3015 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-77f49 subsys=endpoint level=info msg="Successful endpoint creation" containerID=94a9e27686 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=392 identity=3015 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-77f49 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.28 34f2480d-150e-44fb-a94e-623e7559f554 default }" containerID=e825d4130d5a66e2d75520b6b9fbaa2b1a5242062c69e942ac3b0b8b4ea8300d datapathConfiguration="&{false false false false false }" interface=lxc9d8e3bdd7e48 k8sPodName=openstack/memcached-memcached-6479589586-l6jzq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e825d4130d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-l6jzq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e825d4130d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-l6jzq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e825d4130d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.28 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-l6jzq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e825d4130d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identity=19325 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-l6jzq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e825d4130d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identity=19325 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-l6jzq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e825d4130d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2945 identity=19325 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-l6jzq subsys=endpoint level=info msg="Successful endpoint creation" containerID=e825d4130d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2945 identity=19325 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-l6jzq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.109 a27ab0ca-0a87-44cc-b160-ac25a970dcf7 default }" containerID=818064f82fd6effa428f74012f64c2a285a2eb126ea75405bb2d8cc1fabeb5e2 datapathConfiguration="&{false false false false false }" interface=lxc1652f21f7b74 k8sPodName=local-path-storage/helper-pod-create-pvc-a3e7a2e3-1c07-4fd3-a79e-92653175ef48 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=818064f82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3e7a2e3-1c07-4fd3-a79e-92653175ef48 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=818064f82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3e7a2e3-1c07-4fd3-a79e-92653175ef48 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=818064f82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 identity=15871 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3e7a2e3-1c07-4fd3-a79e-92653175ef48 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=818064f82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 identity=15871 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3e7a2e3-1c07-4fd3-a79e-92653175ef48 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=818064f82f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2181 identity=15871 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3e7a2e3-1c07-4fd3-a79e-92653175ef48 subsys=endpoint level=info msg="Successful endpoint creation" containerID=818064f82f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2181 identity=15871 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3e7a2e3-1c07-4fd3-a79e-92653175ef48 subsys=daemon level=info msg="Delete endpoint request" containerID=818064f82f endpointID=2181 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a3e7a2e3-1c07-4fd3-a79e-92653175ef48 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=818064f82f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2181 identity=15871 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3e7a2e3-1c07-4fd3-a79e-92653175ef48 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 232bb903-e364-4345-b830-7eeb9ce2f64c default }" containerID=453fb52ef385e93141023d72658ab286732d70855f3dbe17e5725a37558e396a datapathConfiguration="&{false false false false false }" interface=lxc966a2ce5752a k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=453fb52ef3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1342 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=453fb52ef3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1342 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=453fb52ef3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1342 identity=13825 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=453fb52ef3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1342 identity=13825 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=453fb52ef3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1342 identity=13825 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=453fb52ef3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1342 identity=13825 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.174 48dd64e9-6daa-44fe-adf2-b7897e0d3ab9 default }" containerID=ba29c67f5f447b8d3b637f6dae36f789be793405b059c5a854d568e1c70d35ca datapathConfiguration="&{false false false false false }" interface=lxcd8fc06647adb k8sPodName=openstack/keystone-api-b4bc98f95-5v66t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba29c67f5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-api-b4bc98f95-5v66t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba29c67f5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-api-b4bc98f95-5v66t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ba29c67f5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-api-b4bc98f95-5v66t line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ba29c67f5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identity=1337 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-api-b4bc98f95-5v66t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba29c67f5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identity=1337 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-api-b4bc98f95-5v66t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 00fb42c6-8b70-43fb-bddc-b47a895db44e default }" containerID=009c057fcbd6e06fd9045f18a2d06be066ce91b54fb0c782275be74361688a42 datapathConfiguration="&{false false false false false }" interface=lxc680b2a110e44 k8sPodName=openstack/keystone-credential-setup-jtlhz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=009c057fcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-credential-setup-jtlhz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=009c057fcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9cc8072a-8762-4407-b2ef-dd67b550f2eb,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=9cc8072a-8762-4407-b2ef-dd67b550f2eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-credential-setup-jtlhz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9cc8072a-8762-4407-b2ef-dd67b550f2eb;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=9cc8072a-8762-4407-b2ef-dd67b550f2eb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=009c057fcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=55362 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9cc8072a-8762-4407-b2ef-dd67b550f2eb,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=9cc8072a-8762-4407-b2ef-dd67b550f2eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-credential-setup-jtlhz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=009c057fcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=55362 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-credential-setup-jtlhz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba29c67f5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1263 identity=1337 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-api-b4bc98f95-5v66t subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba29c67f5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1263 identity=1337 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-api-b4bc98f95-5v66t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=009c057fcb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=121 identity=55362 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-credential-setup-jtlhz subsys=endpoint level=info msg="Successful endpoint creation" containerID=009c057fcb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=121 identity=55362 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-credential-setup-jtlhz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=009c057fcb endpointID=121 k8sNamespace=openstack k8sPodName=keystone-credential-setup-jtlhz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9cc8072a-8762-4407-b2ef-dd67b550f2eb k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=9cc8072a-8762-4407-b2ef-dd67b550f2eb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=009c057fcb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=121 identity=55362 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-credential-setup-jtlhz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 822d4e4b-edca-434b-9519-4b09303c89b0 default }" containerID=80ac36b5a4bce586adec40c8f8766b5708c3d82e64df4c19d53dd0a2d597e640 datapathConfiguration="&{false false false false false }" interface=lxcbbf98730bced k8sPodName=openstack/keystone-db-init-54lmz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80ac36b5a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2134 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-init-54lmz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80ac36b5a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2134 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=daca6703-6016-4b5c-ab7e-4d99db369515,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=daca6703-6016-4b5c-ab7e-4d99db369515,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-init-54lmz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=daca6703-6016-4b5c-ab7e-4d99db369515;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=daca6703-6016-4b5c-ab7e-4d99db369515;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80ac36b5a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2134 identity=11113 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=daca6703-6016-4b5c-ab7e-4d99db369515,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=daca6703-6016-4b5c-ab7e-4d99db369515,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-init-54lmz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80ac36b5a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2134 identity=11113 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-init-54lmz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=80ac36b5a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2134 identity=11113 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-init-54lmz subsys=endpoint level=info msg="Successful endpoint creation" containerID=80ac36b5a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2134 identity=11113 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-init-54lmz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=80ac36b5a4 endpointID=2134 k8sNamespace=openstack k8sPodName=keystone-db-init-54lmz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=daca6703-6016-4b5c-ab7e-4d99db369515 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=daca6703-6016-4b5c-ab7e-4d99db369515 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=80ac36b5a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2134 identity=11113 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-init-54lmz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 a771941b-5a20-4f96-b95c-09dbb33f4a1e default }" containerID=1dc3f236463eaeb80b437234a7800e1e116f53d34aaa93bf5ab99e42dbb2ba22 datapathConfiguration="&{false false false false false }" interface=lxc4a271f0c8963 k8sPodName=openstack/keystone-fernet-setup-m7rcz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dc3f23646 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-fernet-setup-m7rcz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dc3f23646 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=30d16cb5-c9b6-4032-9ce6-d7c97e4023b6,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=30d16cb5-c9b6-4032-9ce6-d7c97e4023b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-fernet-setup-m7rcz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=30d16cb5-c9b6-4032-9ce6-d7c97e4023b6;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=30d16cb5-c9b6-4032-9ce6-d7c97e4023b6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1dc3f23646 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=51871 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=30d16cb5-c9b6-4032-9ce6-d7c97e4023b6,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=30d16cb5-c9b6-4032-9ce6-d7c97e4023b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-fernet-setup-m7rcz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dc3f23646 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=51871 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-fernet-setup-m7rcz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1dc3f23646 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=260 identity=51871 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-fernet-setup-m7rcz subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dc3f23646 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=260 identity=51871 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-fernet-setup-m7rcz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1dc3f23646 endpointID=260 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-m7rcz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=30d16cb5-c9b6-4032-9ce6-d7c97e4023b6 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=30d16cb5-c9b6-4032-9ce6-d7c97e4023b6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1dc3f23646 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=260 identity=51871 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-fernet-setup-m7rcz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 bf0556a9-644f-491c-abdc-2745dbe1982d default }" containerID=2e9a11e6fd603c42b88a923e942592b442bfad784e4cb5e1857660566894920e datapathConfiguration="&{false false false false false }" interface=lxc44c01d0ed9d7 k8sPodName=openstack/keystone-db-sync-vs2bf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e9a11e6fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-vs2bf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e9a11e6fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=151380e0-0390-4c3b-a947-bf7b2abcf8bf,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=151380e0-0390-4c3b-a947-bf7b2abcf8bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-vs2bf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=151380e0-0390-4c3b-a947-bf7b2abcf8bf;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=151380e0-0390-4c3b-a947-bf7b2abcf8bf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2e9a11e6fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=15076 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=151380e0-0390-4c3b-a947-bf7b2abcf8bf,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=151380e0-0390-4c3b-a947-bf7b2abcf8bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-vs2bf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e9a11e6fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=15076 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-vs2bf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e9a11e6fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=10 identity=15076 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-vs2bf subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e9a11e6fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=10 identity=15076 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-vs2bf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2e9a11e6fd endpointID=10 k8sNamespace=openstack k8sPodName=keystone-db-sync-vs2bf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=151380e0-0390-4c3b-a947-bf7b2abcf8bf k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=151380e0-0390-4c3b-a947-bf7b2abcf8bf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2e9a11e6fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=10 identity=15076 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-vs2bf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 c0593767-8e00-4183-bace-5b01a9d4e977 default }" containerID=84a85453e40e2d4cdff33d2b8a294a59fb6f389c4b2bd32a2b4fa69fd7ac1100 datapathConfiguration="&{false false false false false }" interface=lxc47c7ffa8e80f k8sPodName=openstack/keystone-rabbit-init-ttrsk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84a85453e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2956 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-rabbit-init-ttrsk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84a85453e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2956 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=15488fe5-ff79-4abc-8310-4f42bd89cf73,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=15488fe5-ff79-4abc-8310-4f42bd89cf73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-rabbit-init-ttrsk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=15488fe5-ff79-4abc-8310-4f42bd89cf73;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=15488fe5-ff79-4abc-8310-4f42bd89cf73;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84a85453e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2956 identity=9716 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=15488fe5-ff79-4abc-8310-4f42bd89cf73,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=15488fe5-ff79-4abc-8310-4f42bd89cf73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-rabbit-init-ttrsk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=84a85453e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2956 identity=9716 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-rabbit-init-ttrsk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84a85453e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2956 identity=9716 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-rabbit-init-ttrsk subsys=endpoint level=info msg="Successful endpoint creation" containerID=84a85453e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2956 identity=9716 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-rabbit-init-ttrsk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=84a85453e4 endpointID=2956 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-ttrsk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=15488fe5-ff79-4abc-8310-4f42bd89cf73 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=15488fe5-ff79-4abc-8310-4f42bd89cf73 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=84a85453e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2956 identity=9716 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-rabbit-init-ttrsk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 3d7a20b5-0e4a-4f80-84eb-0cd49be1e16b default }" containerID=a21b97b1b83b170e571e68f168f403501592ba8828455b8092b87736fa0b6eb8 datapathConfiguration="&{false false false false false }" interface=lxcbf809f51b782 k8sPodName=openstack/keystone-domain-manage-fncnl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a21b97b1b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3877 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-domain-manage-fncnl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a21b97b1b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3877 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ee2e5dde-e1ab-4ddf-9150-8e1a6eac9150,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ee2e5dde-e1ab-4ddf-9150-8e1a6eac9150,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-domain-manage-fncnl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ee2e5dde-e1ab-4ddf-9150-8e1a6eac9150;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=ee2e5dde-e1ab-4ddf-9150-8e1a6eac9150;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a21b97b1b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3877 identity=3112 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ee2e5dde-e1ab-4ddf-9150-8e1a6eac9150,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ee2e5dde-e1ab-4ddf-9150-8e1a6eac9150,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-domain-manage-fncnl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a21b97b1b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3877 identity=3112 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-domain-manage-fncnl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a21b97b1b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3877 identity=3112 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-domain-manage-fncnl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a21b97b1b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3877 identity=3112 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-domain-manage-fncnl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a21b97b1b8 endpointID=3877 k8sNamespace=openstack k8sPodName=keystone-domain-manage-fncnl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ee2e5dde-e1ab-4ddf-9150-8e1a6eac9150 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=ee2e5dde-e1ab-4ddf-9150-8e1a6eac9150 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a21b97b1b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3877 identity=3112 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-domain-manage-fncnl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 68556fa7-d931-4c2e-a62b-e752c840fd9f default }" containerID=377be170335dc927450637db3f38d8419d9ba0808b28e70e6e61e5ce5e985310 datapathConfiguration="&{false false false false false }" interface=lxc16ba2d640ac7 k8sPodName=openstack/keystone-bootstrap-qvnkt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=377be17033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1476 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-bootstrap-qvnkt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=377be17033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1476 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4034f060-fe7e-45ac-a968-b61a602da807,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=4034f060-fe7e-45ac-a968-b61a602da807,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-bootstrap-qvnkt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4034f060-fe7e-45ac-a968-b61a602da807;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=4034f060-fe7e-45ac-a968-b61a602da807;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=377be17033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1476 identity=35907 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4034f060-fe7e-45ac-a968-b61a602da807,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=4034f060-fe7e-45ac-a968-b61a602da807,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-bootstrap-qvnkt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=377be17033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1476 identity=35907 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-bootstrap-qvnkt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=377be17033 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1476 identity=35907 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-bootstrap-qvnkt subsys=endpoint level=info msg="Successful endpoint creation" containerID=377be17033 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1476 identity=35907 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-bootstrap-qvnkt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=377be17033 endpointID=1476 k8sNamespace=openstack k8sPodName=keystone-bootstrap-qvnkt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4034f060-fe7e-45ac-a968-b61a602da807 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=4034f060-fe7e-45ac-a968-b61a602da807 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=377be17033 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1476 identity=35907 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-bootstrap-qvnkt subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03425338509610832 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.34 67bd9af9-3b71-48a7-bfee-5ce9eeee9707 default }" containerID=ea5ad4e422da93fded8c89ce17082605adaafcb91bdd4f5110768792fd076139 datapathConfiguration="&{false false false false false }" interface=lxc6db4f7576553 k8sPodName=local-path-storage/helper-pod-create-pvc-5d618946-592e-4995-b002-73ec503c44dc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea5ad4e422 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1660 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5d618946-592e-4995-b002-73ec503c44dc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea5ad4e422 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1660 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5d618946-592e-4995-b002-73ec503c44dc subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea5ad4e422 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1660 identity=15871 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5d618946-592e-4995-b002-73ec503c44dc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea5ad4e422 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1660 identity=15871 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5d618946-592e-4995-b002-73ec503c44dc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea5ad4e422 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1660 identity=15871 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5d618946-592e-4995-b002-73ec503c44dc subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea5ad4e422 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1660 identity=15871 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5d618946-592e-4995-b002-73ec503c44dc subsys=daemon level=info msg="Delete endpoint request" containerID=ea5ad4e422 endpointID=1660 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5d618946-592e-4995-b002-73ec503c44dc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ea5ad4e422 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1660 identity=15871 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5d618946-592e-4995-b002-73ec503c44dc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 eb7a5fd1-c5c0-4e33-95d3-340dea97e841 default }" containerID=cc067f9b4d5982a8f3e92005229efedbc2b68b3a6f5396b6b6d95c1809a2cf8b datapathConfiguration="&{false false false false false }" interface=lxc11ed1657fa1e k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc067f9b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc067f9b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc067f9b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 identity=55004 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc067f9b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 identity=55004 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cc067f9b4d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2935 identity=55004 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc067f9b4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2935 identity=55004 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.144 689ee7e8-c97e-43b0-b8b7-7107223b4a8f default }" containerID=b5e68f49331df60cd2529f2b68d4eb9aafa77e6c5e365a159ff241278c8cd9c3 datapathConfiguration="&{false false false false false }" interface=lxc256cb11791dd k8sPodName=openstack/barbican-api-7887fc69cc-fp44n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5e68f4933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-api-7887fc69cc-fp44n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5e68f4933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-api-7887fc69cc-fp44n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b5e68f4933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-api-7887fc69cc-fp44n line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5e68f4933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identity=54907 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-api-7887fc69cc-fp44n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5e68f4933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identity=54907 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-api-7887fc69cc-fp44n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5e68f4933 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=421 identity=54907 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-api-7887fc69cc-fp44n subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5e68f4933 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=421 identity=54907 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-api-7887fc69cc-fp44n subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.14 0193edc6-7ec4-4cec-ae3a-65ba8f2afbcc default }" containerID=749bc8ad54038adf8404b1456254a21ec9dc7396c4ac6a2e73598815f2c8b3de datapathConfiguration="&{false false false false false }" interface=lxcfc8d5bb00bcf k8sPodName=openstack/barbican-db-init-b9hvb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=749bc8ad54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2699 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-init-b9hvb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=749bc8ad54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2699 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2927710b-f949-4bde-9e6b-923917a48821,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=2927710b-f949-4bde-9e6b-923917a48821,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-init-b9hvb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2927710b-f949-4bde-9e6b-923917a48821;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=2927710b-f949-4bde-9e6b-923917a48821;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=749bc8ad54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2699 identity=40117 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2927710b-f949-4bde-9e6b-923917a48821,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=2927710b-f949-4bde-9e6b-923917a48821,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-init-b9hvb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=749bc8ad54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2699 identity=40117 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-init-b9hvb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=749bc8ad54 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2699 identity=40117 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-init-b9hvb subsys=endpoint level=info msg="Successful endpoint creation" containerID=749bc8ad54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2699 identity=40117 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-init-b9hvb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=749bc8ad54 endpointID=2699 k8sNamespace=openstack k8sPodName=barbican-db-init-b9hvb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2927710b-f949-4bde-9e6b-923917a48821 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=2927710b-f949-4bde-9e6b-923917a48821 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=749bc8ad54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2699 identity=40117 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-init-b9hvb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 88549403-a202-4aeb-90fd-870dedbe39fc default }" containerID=92674a1a420af95a69a26f2ca325b227d12c4965d2ccfc3a029819df6c9ea9a9 datapathConfiguration="&{false false false false false }" interface=lxc6bedc207427c k8sPodName=openstack/barbican-db-sync-rz99j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92674a1a42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-sync-rz99j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92674a1a42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d1ca5265-b07c-4df5-8e23-f24e1c706af9,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=d1ca5265-b07c-4df5-8e23-f24e1c706af9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-sync-rz99j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d1ca5265-b07c-4df5-8e23-f24e1c706af9;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=d1ca5265-b07c-4df5-8e23-f24e1c706af9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=92674a1a42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identity=54446 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d1ca5265-b07c-4df5-8e23-f24e1c706af9,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=d1ca5265-b07c-4df5-8e23-f24e1c706af9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-sync-rz99j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92674a1a42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identity=54446 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-sync-rz99j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92674a1a42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1148 identity=54446 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-sync-rz99j subsys=endpoint level=info msg="Successful endpoint creation" containerID=92674a1a42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1148 identity=54446 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-sync-rz99j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=92674a1a42 endpointID=1148 k8sNamespace=openstack k8sPodName=barbican-db-sync-rz99j subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d1ca5265-b07c-4df5-8e23-f24e1c706af9 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=d1ca5265-b07c-4df5-8e23-f24e1c706af9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=92674a1a42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1148 identity=54446 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-sync-rz99j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 0e601a23-4b4c-43a4-8261-0bc1e69f8859 default }" containerID=ee5d5eaeb883ae7d5c67356e5ce2bf902fabbc794ae66b670b13f8ad1f3f3106 datapathConfiguration="&{false false false false false }" interface=lxc6bf33a989cc6 k8sPodName=openstack/barbican-rabbit-init-ppzz2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee5d5eaeb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-rabbit-init-ppzz2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee5d5eaeb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d7b1a48a-2a5f-4855-b323-d1fc73d58f4f,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d7b1a48a-2a5f-4855-b323-d1fc73d58f4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-rabbit-init-ppzz2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ee5d5eaeb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-rabbit-init-ppzz2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d7b1a48a-2a5f-4855-b323-d1fc73d58f4f;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d7b1a48a-2a5f-4855-b323-d1fc73d58f4f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee5d5eaeb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 identity=4284 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d7b1a48a-2a5f-4855-b323-d1fc73d58f4f,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d7b1a48a-2a5f-4855-b323-d1fc73d58f4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-rabbit-init-ppzz2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee5d5eaeb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 identity=4284 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-rabbit-init-ppzz2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee5d5eaeb8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2227 identity=4284 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-rabbit-init-ppzz2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee5d5eaeb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2227 identity=4284 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-rabbit-init-ppzz2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee5d5eaeb8 endpointID=2227 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-ppzz2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d7b1a48a-2a5f-4855-b323-d1fc73d58f4f k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d7b1a48a-2a5f-4855-b323-d1fc73d58f4f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ee5d5eaeb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2227 identity=4284 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-rabbit-init-ppzz2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 59a5618c-a4ea-4faf-b17b-0116c2bc0172 default }" containerID=f40d1b950f4d573a150827723cd0ed4b785c65bc62f201a3af486bd4de2d3e85 datapathConfiguration="&{false false false false false }" interface=lxc3e78abe87ed8 k8sPodName=openstack/barbican-ks-service-zwvmg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f40d1b950f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-service-zwvmg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f40d1b950f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9c4b1b0e-717a-415f-a0da-25f5e9981905,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=9c4b1b0e-717a-415f-a0da-25f5e9981905,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-service-zwvmg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9c4b1b0e-717a-415f-a0da-25f5e9981905;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=9c4b1b0e-717a-415f-a0da-25f5e9981905;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f40d1b950f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=20698 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9c4b1b0e-717a-415f-a0da-25f5e9981905,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=9c4b1b0e-717a-415f-a0da-25f5e9981905,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-service-zwvmg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f40d1b950f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=20698 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-service-zwvmg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f40d1b950f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=417 identity=20698 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-service-zwvmg subsys=endpoint level=info msg="Successful endpoint creation" containerID=f40d1b950f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=417 identity=20698 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-service-zwvmg subsys=daemon level=info msg="Delete endpoint request" containerID=f40d1b950f endpointID=417 k8sNamespace=openstack k8sPodName=barbican-ks-service-zwvmg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9c4b1b0e-717a-415f-a0da-25f5e9981905 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=9c4b1b0e-717a-415f-a0da-25f5e9981905 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f40d1b950f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=417 identity=20698 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-service-zwvmg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 c28b54e2-10a2-4154-ac34-2c7361aca263 default }" containerID=678c9d85c09f7a7d88a368ad28ee1089d156161288a515b145020bd20551057c datapathConfiguration="&{false false false false false }" interface=lxc968639c5024a k8sPodName=openstack/barbican-ks-endpoints-dxccl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=678c9d85c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dxccl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=678c9d85c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9767ed8a-fd18-4f89-984f-dcfce81a5e50,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9767ed8a-fd18-4f89-984f-dcfce81a5e50,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dxccl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9767ed8a-fd18-4f89-984f-dcfce81a5e50;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=9767ed8a-fd18-4f89-984f-dcfce81a5e50;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=678c9d85c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 identity=24997 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9767ed8a-fd18-4f89-984f-dcfce81a5e50,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9767ed8a-fd18-4f89-984f-dcfce81a5e50,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dxccl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=678c9d85c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 identity=24997 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dxccl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=678c9d85c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1248 identity=24997 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dxccl subsys=endpoint level=info msg="Successful endpoint creation" containerID=678c9d85c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1248 identity=24997 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dxccl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=678c9d85c0 endpointID=1248 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-dxccl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9767ed8a-fd18-4f89-984f-dcfce81a5e50 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=9767ed8a-fd18-4f89-984f-dcfce81a5e50 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=678c9d85c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1248 identity=24997 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dxccl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 91ff2776-5fcc-4a4e-ac86-b56e3e945f2f default }" containerID=46c0e060382a6d6e57d6d30fe81808a6edf356dc228c11ed0ccb77db7b41cad2 datapathConfiguration="&{false false false false false }" interface=lxc5acb34f11ed2 k8sPodName=openstack/barbican-ks-user-5qqhk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46c0e06038 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-5qqhk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46c0e06038 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=39e8aada-931e-4729-870d-d1650fa3fd9d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=39e8aada-931e-4729-870d-d1650fa3fd9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-5qqhk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=39e8aada-931e-4729-870d-d1650fa3fd9d;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=39e8aada-931e-4729-870d-d1650fa3fd9d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46c0e06038 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identity=9381 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=39e8aada-931e-4729-870d-d1650fa3fd9d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=39e8aada-931e-4729-870d-d1650fa3fd9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-5qqhk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46c0e06038 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identity=9381 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-5qqhk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=46c0e06038 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1594 identity=9381 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-5qqhk subsys=endpoint level=info msg="Successful endpoint creation" containerID=46c0e06038 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1594 identity=9381 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-5qqhk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=46c0e06038 endpointID=1594 k8sNamespace=openstack k8sPodName=barbican-ks-user-5qqhk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=39e8aada-931e-4729-870d-d1650fa3fd9d k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=39e8aada-931e-4729-870d-d1650fa3fd9d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=46c0e06038 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1594 identity=9381 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-user-5qqhk subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.104 b0aed30e-df19-4e18-a753-4e1e80605d28 default }" containerID=1608be93726db4841c460738ed72e36ba4862731bb7f76c5879bf7e18672b388 datapathConfiguration="&{false false false false false }" interface=lxc83810f51ccfa k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-76zm5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1608be9372 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 ipv4=10.0.0.104 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-76zm5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1608be9372 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.104 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-76zm5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1608be9372 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.104 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-76zm5 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1608be9372 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=27556 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.104 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-76zm5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1608be9372 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=27556 ipv4=10.0.0.104 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-76zm5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1608be9372 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=613 identity=27556 ipv4=10.0.0.104 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-76zm5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1608be9372 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=27556 ipv4=10.0.0.104 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-76zm5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.186 f5cdaf31-9673-41d0-a6fa-2b73a6b3594a default }" containerID=b45a11d631faac11d1ab87b0759a0b84a12f2311f2e2b97c5207923eafb6b594 datapathConfiguration="&{false false false false false }" interface=lxcee5b6c5f2c9b k8sPodName=openstack/rook-ceph-detect-version-hgv5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b45a11d631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hgv5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b45a11d631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=f849e712-193d-4d18-8dca-98a5b6f4feff,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=f849e712-193d-4d18-8dca-98a5b6f4feff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hgv5d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=f849e712-193d-4d18-8dca-98a5b6f4feff;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=f849e712-193d-4d18-8dca-98a5b6f4feff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b45a11d631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 identity=16922 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=f849e712-193d-4d18-8dca-98a5b6f4feff,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=f849e712-193d-4d18-8dca-98a5b6f4feff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hgv5d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b45a11d631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 identity=16922 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hgv5d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b45a11d631 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1665 identity=16922 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hgv5d subsys=endpoint level=info msg="Successful endpoint creation" containerID=b45a11d631 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1665 identity=16922 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hgv5d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b45a11d631 endpointID=1665 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-hgv5d subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=f849e712-193d-4d18-8dca-98a5b6f4feff k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=f849e712-193d-4d18-8dca-98a5b6f4feff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=b45a11d631 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1665 identity=16922 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hgv5d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 ccfca4ef-5d54-417f-be30-982b0a68761e default }" containerID=4613ffe1fd09cee68d9fc176eee32f6fa0e2e2bf3b39204df112d27dcabd1a8d datapathConfiguration="&{false false false false false }" interface=lxcc226f5c93fcb k8sPodName=openstack/ceph-object-controller-detect-version-qx87r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4613ffe1fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qx87r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4613ffe1fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d95ff3d8-1895-4ad9-92e9-6969dc532bd6,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d95ff3d8-1895-4ad9-92e9-6969dc532bd6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qx87r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=d95ff3d8-1895-4ad9-92e9-6969dc532bd6;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=d95ff3d8-1895-4ad9-92e9-6969dc532bd6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4613ffe1fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identity=30950 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d95ff3d8-1895-4ad9-92e9-6969dc532bd6,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d95ff3d8-1895-4ad9-92e9-6969dc532bd6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qx87r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4613ffe1fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identity=30950 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qx87r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4613ffe1fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1478 identity=30950 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qx87r subsys=endpoint level=info msg="Successful endpoint creation" containerID=4613ffe1fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1478 identity=30950 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qx87r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4613ffe1fd endpointID=1478 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-qx87r subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=d95ff3d8-1895-4ad9-92e9-6969dc532bd6 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=d95ff3d8-1895-4ad9-92e9-6969dc532bd6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=4613ffe1fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1478 identity=30950 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qx87r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 f301cd16-725c-4d27-a73a-39d9db9d97ba default }" containerID=23e2f3e82930354cda1cd1e28cc4da93c576e5479545157d0c4d312ef355b4b6 datapathConfiguration="&{false false false false false }" interface=lxc3dc2ac46bff7 k8sPodName=local-path-storage/helper-pod-create-pvc-7f21cbbe-dda9-441a-af97-997949651330 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23e2f3e829 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3953 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7f21cbbe-dda9-441a-af97-997949651330 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23e2f3e829 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3953 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7f21cbbe-dda9-441a-af97-997949651330 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23e2f3e829 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3953 identity=15871 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7f21cbbe-dda9-441a-af97-997949651330 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23e2f3e829 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3953 identity=15871 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7f21cbbe-dda9-441a-af97-997949651330 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23e2f3e829 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3953 identity=15871 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7f21cbbe-dda9-441a-af97-997949651330 subsys=endpoint level=info msg="Successful endpoint creation" containerID=23e2f3e829 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3953 identity=15871 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7f21cbbe-dda9-441a-af97-997949651330 subsys=daemon level=info msg="Delete endpoint request" containerID=23e2f3e829 endpointID=3953 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7f21cbbe-dda9-441a-af97-997949651330 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=23e2f3e829 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3953 identity=15871 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7f21cbbe-dda9-441a-af97-997949651330 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 0de64c00-7611-495a-ae94-0a77f842ffa3 default }" containerID=e66413e2643997abcec141cab971a60df6b027fc73a729708954eec5f2eae0ba datapathConfiguration="&{false false false false false }" interface=lxc41d4a51e5f74 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e66413e264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2240 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e66413e264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2240 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e66413e264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2240 identity=29518 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e66413e264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2240 identity=29518 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e66413e264 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2240 identity=29518 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e66413e264 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2240 identity=29518 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.163 2b83bf28-07dd-4518-8781-d4e7a87650e3 default }" containerID=05fa6411cefb3dae43ae691a3d6e6c42e409a50c4aec1c0eb26ab060173879ea datapathConfiguration="&{false false false false false }" interface=lxc8a8a58a84062 k8sPodName=openstack/glance-db-init-4mdgv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05fa6411ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=647 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-db-init-4mdgv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05fa6411ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=647 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=86c2a323-5c1c-4dac-b243-ebe1997ef7cb,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=86c2a323-5c1c-4dac-b243-ebe1997ef7cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-db-init-4mdgv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=86c2a323-5c1c-4dac-b243-ebe1997ef7cb;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=86c2a323-5c1c-4dac-b243-ebe1997ef7cb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=05fa6411ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=647 identity=48955 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=86c2a323-5c1c-4dac-b243-ebe1997ef7cb,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=86c2a323-5c1c-4dac-b243-ebe1997ef7cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-db-init-4mdgv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05fa6411ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=647 identity=48955 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-db-init-4mdgv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=05fa6411ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=647 identity=48955 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-db-init-4mdgv subsys=endpoint level=info msg="Successful endpoint creation" containerID=05fa6411ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=647 identity=48955 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-db-init-4mdgv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=05fa6411ce endpointID=647 k8sNamespace=openstack k8sPodName=glance-db-init-4mdgv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=86c2a323-5c1c-4dac-b243-ebe1997ef7cb k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=86c2a323-5c1c-4dac-b243-ebe1997ef7cb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=05fa6411ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=647 identity=48955 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-db-init-4mdgv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 9a9ec327-c313-476f-9eb5-fbe15926f915 default }" containerID=666d09cbd1bf8947ba36238034b1b1e661492528c13ff5f8f488fb010ced7dcf datapathConfiguration="&{false false false false false }" interface=lxc0488cebaea9c k8sPodName=openstack/glance-db-sync-ps94c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=666d09cbd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3044 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-db-sync-ps94c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=666d09cbd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3044 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=31506176-2493-489c-aab0-723fbee399ae,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=31506176-2493-489c-aab0-723fbee399ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-db-sync-ps94c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=31506176-2493-489c-aab0-723fbee399ae;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=31506176-2493-489c-aab0-723fbee399ae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=666d09cbd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3044 identity=35610 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=31506176-2493-489c-aab0-723fbee399ae,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=31506176-2493-489c-aab0-723fbee399ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-db-sync-ps94c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=666d09cbd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3044 identity=35610 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-db-sync-ps94c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=666d09cbd1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3044 identity=35610 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-db-sync-ps94c subsys=endpoint level=info msg="Successful endpoint creation" containerID=666d09cbd1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3044 identity=35610 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-db-sync-ps94c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.176 9c68b6eb-1f8f-44fd-9647-9e44111e5c09 default }" containerID=cd27465fb83aac68748b00252aae088e503d4364a1b7cdce53ba1f4bcb4ce422 datapathConfiguration="&{false false false false false }" interface=lxcb23eca3bf623 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b7jmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd27465fb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b7jmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd27465fb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b7jmh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd27465fb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 identity=50604 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b7jmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd27465fb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 identity=50604 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b7jmh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 b1610219-cc7b-4254-993f-54146ac9bae9 default }" containerID=ed444091229abb52f9f978eb157914d4eaa689fb92b90d1b7d78d95b121890e5 datapathConfiguration="&{false false false false false }" interface=lxc51d029559ad2 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-smmmg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed44409122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-smmmg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed44409122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-smmmg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed44409122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identity=64988 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-smmmg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed44409122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identity=64988 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-smmmg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cd27465fb8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2462 identity=50604 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b7jmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd27465fb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2462 identity=50604 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b7jmh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ed44409122 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=473 identity=64988 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-smmmg subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed44409122 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=473 identity=64988 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-smmmg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=666d09cbd1 endpointID=3044 k8sNamespace=openstack k8sPodName=glance-db-sync-ps94c subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=31506176-2493-489c-aab0-723fbee399ae k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=31506176-2493-489c-aab0-723fbee399ae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=666d09cbd1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3044 identity=35610 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-db-sync-ps94c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 eace83f0-e989-4f63-9cd7-4f99ed086868 default }" containerID=b5a9689ae6eba1f26f137c0ea93b6bedc50a58656ac5e73d58f904bdf44bedba datapathConfiguration="&{false false false false false }" interface=lxc3af3bbe9d8fa k8sPodName=openstack/glance-rabbit-init-zq2sq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5a9689ae6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-rabbit-init-zq2sq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5a9689ae6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=da74dc7e-58a3-4e05-85d9-cab706bce4e0,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=da74dc7e-58a3-4e05-85d9-cab706bce4e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-rabbit-init-zq2sq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=da74dc7e-58a3-4e05-85d9-cab706bce4e0;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=da74dc7e-58a3-4e05-85d9-cab706bce4e0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5a9689ae6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=39080 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=da74dc7e-58a3-4e05-85d9-cab706bce4e0,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=da74dc7e-58a3-4e05-85d9-cab706bce4e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-rabbit-init-zq2sq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5a9689ae6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=39080 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-rabbit-init-zq2sq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b5a9689ae6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=453 identity=39080 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-rabbit-init-zq2sq subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5a9689ae6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=453 identity=39080 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-rabbit-init-zq2sq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b5a9689ae6 endpointID=453 k8sNamespace=openstack k8sPodName=glance-rabbit-init-zq2sq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=da74dc7e-58a3-4e05-85d9-cab706bce4e0 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=da74dc7e-58a3-4e05-85d9-cab706bce4e0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b5a9689ae6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=453 identity=39080 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-rabbit-init-zq2sq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 8430fcd9-711d-4d33-a34e-41f408c5c12a default }" containerID=5e64f5b3b821ef6bae7852995401d13839ed2780bc914c12e4123d8e9b37e5c6 datapathConfiguration="&{false false false false false }" interface=lxcce8abff513f9 k8sPodName=openstack/glance-ks-service-2h8mq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e64f5b3b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-service-2h8mq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e64f5b3b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=44ad9ef1-5931-4e2a-95bc-90bad69619aa,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=44ad9ef1-5931-4e2a-95bc-90bad69619aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-service-2h8mq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5e64f5b3b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-service-2h8mq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=44ad9ef1-5931-4e2a-95bc-90bad69619aa;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=44ad9ef1-5931-4e2a-95bc-90bad69619aa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e64f5b3b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identity=28670 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=44ad9ef1-5931-4e2a-95bc-90bad69619aa,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=44ad9ef1-5931-4e2a-95bc-90bad69619aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-service-2h8mq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e64f5b3b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identity=28670 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-service-2h8mq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e64f5b3b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1379 identity=28670 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-service-2h8mq subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e64f5b3b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1379 identity=28670 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-service-2h8mq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5e64f5b3b8 endpointID=1379 k8sNamespace=openstack k8sPodName=glance-ks-service-2h8mq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=44ad9ef1-5931-4e2a-95bc-90bad69619aa k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=44ad9ef1-5931-4e2a-95bc-90bad69619aa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5e64f5b3b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1379 identity=28670 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/glance-ks-service-2h8mq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 339981d6-8fce-4360-9f16-851877e2a3b0 default }" containerID=8ddee684075f0714b8c4562b6d4c71ee6b6ebba6f61427df0384fa4ba7826183 datapathConfiguration="&{false false false false false }" interface=lxc79a82580aa44 k8sPodName=openstack/glance-ks-endpoints-lt4w4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ddee68407 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-endpoints-lt4w4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ddee68407 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7b8bfd08-b3e4-4e80-8d32-c06a6034a99d,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7b8bfd08-b3e4-4e80-8d32-c06a6034a99d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-endpoints-lt4w4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7b8bfd08-b3e4-4e80-8d32-c06a6034a99d;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7b8bfd08-b3e4-4e80-8d32-c06a6034a99d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ddee68407 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identity=867 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7b8bfd08-b3e4-4e80-8d32-c06a6034a99d,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7b8bfd08-b3e4-4e80-8d32-c06a6034a99d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-endpoints-lt4w4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ddee68407 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identity=867 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-endpoints-lt4w4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8ddee68407 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=293 identity=867 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-endpoints-lt4w4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ddee68407 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=293 identity=867 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-endpoints-lt4w4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ddee68407 endpointID=293 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-lt4w4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7b8bfd08-b3e4-4e80-8d32-c06a6034a99d k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7b8bfd08-b3e4-4e80-8d32-c06a6034a99d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8ddee68407 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=293 identity=867 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-endpoints-lt4w4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 9323e706-b2cd-47fa-b395-2b04355207f0 default }" containerID=89022d9bed295bb1d3926010208432930c62b3e9cf90e6a5c14585965211f53b datapathConfiguration="&{false false false false false }" interface=lxcf8c39d7a790c k8sPodName=openstack/glance-ks-user-k9dxp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89022d9bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-user-k9dxp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89022d9bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=44ae20e8-37c4-43f8-888c-11db790d9e89,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=44ae20e8-37c4-43f8-888c-11db790d9e89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-user-k9dxp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=44ae20e8-37c4-43f8-888c-11db790d9e89;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=44ae20e8-37c4-43f8-888c-11db790d9e89;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=89022d9bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-user-k9dxp line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=89022d9bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 identity=15247 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=44ae20e8-37c4-43f8-888c-11db790d9e89,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=44ae20e8-37c4-43f8-888c-11db790d9e89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-user-k9dxp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89022d9bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 identity=15247 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-user-k9dxp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89022d9bed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=884 identity=15247 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-user-k9dxp subsys=endpoint level=info msg="Successful endpoint creation" containerID=89022d9bed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=884 identity=15247 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-user-k9dxp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=89022d9bed endpointID=884 k8sNamespace=openstack k8sPodName=glance-ks-user-k9dxp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=44ae20e8-37c4-43f8-888c-11db790d9e89 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=44ae20e8-37c4-43f8-888c-11db790d9e89 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=89022d9bed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=884 identity=15247 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-user-k9dxp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 9d304207-8ba1-4ecf-b985-5b1bdd763a97 default }" containerID=a13ee7074c914a02c1de68b82a9dc65cce7a74c6a95a0f6543d0d1018c6a17cb datapathConfiguration="&{false false false false false }" interface=lxc6d59d10e6012 k8sPodName=openstack/glance-metadefs-load-sp6wk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a13ee7074c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-metadefs-load-sp6wk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a13ee7074c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a9aeee40-5dfc-4119-8af7-f9c0dff818f0,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a9aeee40-5dfc-4119-8af7-f9c0dff818f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-metadefs-load-sp6wk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a13ee7074c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-metadefs-load-sp6wk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a9aeee40-5dfc-4119-8af7-f9c0dff818f0;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=a9aeee40-5dfc-4119-8af7-f9c0dff818f0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a13ee7074c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=3739 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a9aeee40-5dfc-4119-8af7-f9c0dff818f0,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a9aeee40-5dfc-4119-8af7-f9c0dff818f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-metadefs-load-sp6wk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a13ee7074c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=3739 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-metadefs-load-sp6wk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a13ee7074c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=606 identity=3739 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-metadefs-load-sp6wk subsys=endpoint level=info msg="Successful endpoint creation" containerID=a13ee7074c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=606 identity=3739 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-metadefs-load-sp6wk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a13ee7074c endpointID=606 k8sNamespace=openstack k8sPodName=glance-metadefs-load-sp6wk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a9aeee40-5dfc-4119-8af7-f9c0dff818f0 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=a9aeee40-5dfc-4119-8af7-f9c0dff818f0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a13ee7074c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=606 identity=3739 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-metadefs-load-sp6wk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 57b64fd4-8f83-4bd7-b37a-286a9eac57ba default }" containerID=7ae121c979f358f7e5d2b7adc0f43b3d5ffa14f6081dc6563bc31f6d52dc2726 datapathConfiguration="&{false false false false false }" interface=lxc9a90435c903a k8sPodName=openstack/glance-storage-init-n29d7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ae121c979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3972 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-storage-init-n29d7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ae121c979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3972 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ce2cc4f3-c354-4595-bedd-bf7de79e84a0,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=ce2cc4f3-c354-4595-bedd-bf7de79e84a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-storage-init-n29d7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ce2cc4f3-c354-4595-bedd-bf7de79e84a0;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=ce2cc4f3-c354-4595-bedd-bf7de79e84a0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ae121c979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3972 identity=6425 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ce2cc4f3-c354-4595-bedd-bf7de79e84a0,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=ce2cc4f3-c354-4595-bedd-bf7de79e84a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-storage-init-n29d7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ae121c979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3972 identity=6425 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-storage-init-n29d7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ae121c979 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3972 identity=6425 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-storage-init-n29d7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ae121c979 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3972 identity=6425 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-storage-init-n29d7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ae121c979 endpointID=3972 k8sNamespace=openstack k8sPodName=glance-storage-init-n29d7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ce2cc4f3-c354-4595-bedd-bf7de79e84a0 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=ce2cc4f3-c354-4595-bedd-bf7de79e84a0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7ae121c979 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3972 identity=6425 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-storage-init-n29d7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 f2f79018-b1a3-49d4-9e0f-63ef444e9dd5 default }" containerID=d7f345047669e881029f4d8d84d2df63d92c6da4234c6c3358d6ce12c1fde2c7 datapathConfiguration="&{false false false false false }" interface=lxc0157edac5119 k8sPodName=openstack/glance-api-6575764d67-crd8d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7f3450476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3928 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-api-6575764d67-crd8d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7f3450476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3928 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-api-6575764d67-crd8d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d7f3450476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3928 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-api-6575764d67-crd8d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7f3450476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3928 identity=52711 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-api-6575764d67-crd8d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7f3450476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3928 identity=52711 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-api-6575764d67-crd8d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7f3450476 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3928 identity=52711 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-api-6575764d67-crd8d subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7f3450476 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3928 identity=52711 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-api-6575764d67-crd8d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.205 7459520d-b3da-4b25-bdd5-bce7d5b672ea default }" containerID=0c873d05294659b99373ae9e4afe773227e39f0bcf65cd21360e17d334cbb8e8 datapathConfiguration="&{false false false false false }" interface=lxc7ab55c21dc29 k8sPodName=openstack/staffeln-conductor-7fd445ff47-gb22b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c873d0529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-conductor-7fd445ff47-gb22b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c873d0529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-conductor-7fd445ff47-gb22b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0c873d0529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-conductor-7fd445ff47-gb22b line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0c873d0529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identity=57650 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-conductor-7fd445ff47-gb22b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c873d0529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identity=57650 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-conductor-7fd445ff47-gb22b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 51ff3ae6-7419-4a4f-864f-9cbe0fb61ead default }" containerID=4fe91b514f8fe40e27b363ab4494427f390f6c30dbb31b8443111bb862cedf26 datapathConfiguration="&{false false false false false }" interface=lxc011c3660a89d k8sPodName=openstack/staffeln-api-947998576-tpcq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fe91b514f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1566 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-947998576-tpcq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fe91b514f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1566 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-947998576-tpcq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fe91b514f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1566 identity=27491 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-947998576-tpcq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fe91b514f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1566 identity=27491 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-947998576-tpcq8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 f3034a53-03f8-45f2-9e79-8293c5ed5313 default }" containerID=5718f81da78300beefff866e48712c2ceccd38b9fbbebe631abf198c4e7f3c9a datapathConfiguration="&{false false false false false }" interface=lxc03026f3d7661 k8sPodName=openstack/staffeln-db-init-rqjrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5718f81da7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-db-init-rqjrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5718f81da7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4ebac9ba-1826-4e06-85bd-1921c5f1c779,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=4ebac9ba-1826-4e06-85bd-1921c5f1c779,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-db-init-rqjrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=4ebac9ba-1826-4e06-85bd-1921c5f1c779;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=4ebac9ba-1826-4e06-85bd-1921c5f1c779;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5718f81da7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 identity=11046 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4ebac9ba-1826-4e06-85bd-1921c5f1c779,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=4ebac9ba-1826-4e06-85bd-1921c5f1c779,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-db-init-rqjrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5718f81da7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 identity=11046 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-db-init-rqjrt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c873d0529 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=994 identity=57650 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-conductor-7fd445ff47-gb22b subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c873d0529 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=994 identity=57650 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-conductor-7fd445ff47-gb22b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4fe91b514f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1566 identity=27491 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-947998576-tpcq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fe91b514f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1566 identity=27491 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-947998576-tpcq8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5718f81da7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3609 identity=11046 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-db-init-rqjrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=5718f81da7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3609 identity=11046 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-db-init-rqjrt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5718f81da7 endpointID=3609 k8sNamespace=openstack k8sPodName=staffeln-db-init-rqjrt subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=4ebac9ba-1826-4e06-85bd-1921c5f1c779 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=4ebac9ba-1826-4e06-85bd-1921c5f1c779 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=5718f81da7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3609 identity=11046 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-db-init-rqjrt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 0719726e-db89-4867-bffc-c47c652ecd1e default }" containerID=8c0804c4ebc555ceb8fca184062a39f681d9f7f78d6fb5714f74adcb3c06434c datapathConfiguration="&{false false false false false }" interface=lxcaf639ac9a52e k8sPodName=openstack/staffeln-db-sync-jn9fg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c0804c4eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-jn9fg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c0804c4eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=fa49199c-e0fc-4303-a286-a6fc2bfaa5bc,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=fa49199c-e0fc-4303-a286-a6fc2bfaa5bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-jn9fg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=fa49199c-e0fc-4303-a286-a6fc2bfaa5bc;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=fa49199c-e0fc-4303-a286-a6fc2bfaa5bc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c0804c4eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identity=13240 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=fa49199c-e0fc-4303-a286-a6fc2bfaa5bc,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=fa49199c-e0fc-4303-a286-a6fc2bfaa5bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-jn9fg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8c0804c4eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identity=13240 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-jn9fg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c0804c4eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2867 identity=13240 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-jn9fg subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c0804c4eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2867 identity=13240 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-jn9fg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager