level=info msg="Memory available for map entries (0.003% of 67421630464B): 168554076B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.078423ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="60.202µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.164216ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="15.481µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=98.389524ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="9.82µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="13.481µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="47.341µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="52.281µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="62.472µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="366.621µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.78µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.551202ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.017485ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="39.061µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="36.781µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="197.106µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="79.832µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="61.192µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=45.439692ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="73.952µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.29µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.12µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.70.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.252502ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=201.043418ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.984236ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="2.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="3.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="114.034µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="14.851µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="67.762µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="291.809µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.5µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.15µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="221.126µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="905.528µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.354872ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.95µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="21.981µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.70 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.70 ipAddr.ipv6="" k8sNodeIP=199.204.45.70 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.70" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.66" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.70" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.70} {CiliumInternalIP 10.0.0.66}] 10.0.0.0/24 [] [] 10.0.0.19 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40843" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.630138742s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="14.51µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.22µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="80.193µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="6.621µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.772700682s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=302.778112ms file-path=/var/run/cilium/state/templates/2bb08dda6e0318e462c98b390452146a54dc0ede4ab0f0f9538a612dbd3a602c/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1991 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 41cd6108-cad7-4719-9e9d-54ceafa0cb3c default }" containerID=000a9ae29663eaae2963db47a92fe65a945fd0bb6e6ca0833edf9161fa9bf73a datapathConfiguration="&{false false false false false }" interface=lxc75418ae4f318 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2mfp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=000a9ae296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 ipv4=10.0.0.98 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2mfp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=000a9ae296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f4f99b34-e5af-4f73-b33a-cbc104f2b32a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f4f99b34-e5af-4f73-b33a-cbc104f2b32a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.98 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2mfp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.233 9652b9b2-d213-4632-a928-fd825069d351 default }" containerID=ba01d9fa3fe2ce60c511e0bd8acbbcbbfe8f3316695a1b7f20a2025258c5f2cb datapathConfiguration="&{false false false false false }" interface=lxcac8c64b0204f k8sPodName=kube-system/coredns-7c96b6546b-sczvv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba01d9fa3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sczvv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba01d9fa3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sczvv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ba01d9fa3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sczvv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=f4f99b34-e5af-4f73-b33a-cbc104f2b32a;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=f4f99b34-e5af-4f73-b33a-cbc104f2b32a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=000a9ae296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.98 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2mfp line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=000a9ae296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 identity=39403 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f4f99b34-e5af-4f73-b33a-cbc104f2b32a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f4f99b34-e5af-4f73-b33a-cbc104f2b32a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.98 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2mfp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=000a9ae296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 identity=39403 ipv4=10.0.0.98 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2mfp subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba01d9fa3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 identity=64170 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sczvv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba01d9fa3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 identity=64170 ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sczvv subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 ipv4=10.0.0.19 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identityLabels="reserved:health" ipv4=10.0.0.19 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identity=4 identityLabels="reserved:health" ipv4=10.0.0.19 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.066211615s file-path=/var/run/cilium/state/templates/7cc7f29a64f95ca96f47b2fd6abc2a9491605bdaff0056e6560f9ec75d652472/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=ba01d9fa3f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=245 identity=64170 ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sczvv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=116 identity=4 ipv4=10.0.0.19 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba01d9fa3f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=245 identity=64170 ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sczvv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=000a9ae296 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2515 identity=39403 ipv4=10.0.0.98 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2mfp subsys=endpoint level=info msg="Successful endpoint creation" containerID=000a9ae296 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2515 identity=39403 ipv4=10.0.0.98 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2mfp subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=000a9ae296 endpointID=2515 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-k2mfp subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=f4f99b34-e5af-4f73-b33a-cbc104f2b32a k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=f4f99b34-e5af-4f73-b33a-cbc104f2b32a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=000a9ae296 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2515 identity=39403 ipv4=10.0.0.98 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2mfp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 285e9675-8c7f-4103-8c49-d822275d30ee default }" containerID=e8a49ba112ea82e158ed21f2084be7a4dfac2beda63986a62599c3cf62586428 datapathConfiguration="&{false false false false false }" interface=lxc460c93503276 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-782gl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8a49ba112 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2594 ipv4=10.0.0.179 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-782gl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8a49ba112 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2594 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.179 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-782gl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e8a49ba112 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2594 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.179 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-782gl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8a49ba112 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2594 identity=39972 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.179 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-782gl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8a49ba112 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2594 identity=39972 ipv4=10.0.0.179 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-782gl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8a49ba112 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2594 identity=39972 ipv4=10.0.0.179 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-782gl subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8a49ba112 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2594 identity=39972 ipv4=10.0.0.179 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-782gl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1991 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01991 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01991 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01991 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01991:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1991 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 a6eff305-0551-4f1d-932c-b74e5a43a1f9 default }" containerID=1bb255225f8111b4b8ee8653fbe59ffc29f3eb1b73e5bcc66a96354b474dc63e datapathConfiguration="&{false false false false false }" interface=lxc0dba87ee8c60 k8sPodName=kube-system/coredns-67659f764b-8tsqp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bb255225f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-8tsqp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bb255225f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-8tsqp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1bb255225f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identity=64170 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-8tsqp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bb255225f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identity=64170 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-8tsqp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 660f0f3b-e4f7-499a-9c05-47082263f50f default }" containerID=83cbba45f75a504789cb59fff1cea2973175e88c7273ea1e7479a3b3d1089b02 datapathConfiguration="&{false false false false false }" interface=lxc644d6ad40038 k8sPodName=kube-system/coredns-67659f764b-t746x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83cbba45f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-67659f764b-t746x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83cbba45f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-67659f764b-t746x subsys=endpoint level=info msg="Identity of endpoint changed" containerID=83cbba45f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 identity=64170 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-67659f764b-t746x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83cbba45f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 identity=64170 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-67659f764b-t746x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bb255225f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2297 identity=64170 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-8tsqp subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bb255225f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2297 identity=64170 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-8tsqp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=83cbba45f7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=898 identity=64170 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-67659f764b-t746x subsys=endpoint level=info msg="Successful endpoint creation" containerID=83cbba45f7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=898 identity=64170 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-67659f764b-t746x subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.190 2e9d413f-aa2d-40a0-baf2-d5e2461ba30e default }" containerID=0912843b5cdd3d55072bad9dfe9e790efbf90dc9e473b0d8057d06bcf4acff1a datapathConfiguration="&{false false false false false }" interface=lxc37b75dd4144b k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vjwnf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0912843b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vjwnf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0912843b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vjwnf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0912843b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=13445 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vjwnf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0912843b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=13445 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vjwnf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0912843b5c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=94 identity=13445 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vjwnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=0912843b5c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=94 identity=13445 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vjwnf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ba01d9fa3f endpointID=245 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-sczvv subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=ba01d9fa3f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=245 identity=64170 ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sczvv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 1ea6033b-fdff-46df-8741-060614da23a1 default }" containerID=ca5e0ae9c8218e8cc5f861c2d7a55c7462ddde51bf6644bb6770fdf1a67c016c datapathConfiguration="&{false false false false false }" interface=lxcb9695e2ef641 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ktlc9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca5e0ae9c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ktlc9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca5e0ae9c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ktlc9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.98 413043a8-3709-4b97-b591-4ad47279e850 default }" containerID=a4425126bf276ac0dc5b0b7a9e215df7513a159f35221e8bc4aa3621a9c5eca0 datapathConfiguration="&{false false false false false }" interface=lxcfc2bdabd612d k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hkhn7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4425126bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 ipv4=10.0.0.98 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hkhn7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4425126bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.98 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hkhn7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 0edec1a9-fb3f-4683-8a43-0e8bf3cb997f default }" containerID=506897173b2feb0e2c290a6e9ec0360246d17cfc2307fa74273d5838ec6b3924 datapathConfiguration="&{false false false false false }" interface=lxc5ef61fa2fabe k8sPodName=cert-manager/cert-manager-75c4c745bc-4j7xx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=506897173b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2977 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4j7xx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=506897173b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2977 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4j7xx subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca5e0ae9c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=1045 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ktlc9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ca5e0ae9c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=1045 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ktlc9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=506897173b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2977 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4j7xx line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=a4425126bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.98 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hkhn7 line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca5e0ae9c8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1085 identity=1045 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ktlc9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca5e0ae9c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1085 identity=1045 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ktlc9 subsys=daemon level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4425126bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 identity=42853 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.98 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hkhn7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4425126bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 identity=42853 ipv4=10.0.0.98 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hkhn7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=506897173b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2977 identity=10679 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4j7xx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=506897173b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2977 identity=10679 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4j7xx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a4425126bf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1596 identity=42853 ipv4=10.0.0.98 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hkhn7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4425126bf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1596 identity=42853 ipv4=10.0.0.98 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hkhn7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=506897173b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2977 identity=10679 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4j7xx subsys=endpoint level=info msg="Successful endpoint creation" containerID=506897173b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2977 identity=10679 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4j7xx subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.36 025375ad-cfde-4984-8e6f-2c2efbd5c1cc default }" containerID=827317b428fee0062aff797c3659c58bfad15bae295e69b770349a91c7dfeac3 datapathConfiguration="&{false false false false false }" interface=lxc06ed2960adcf k8sPodName=cert-manager/cert-manager-startupapicheck-qmzts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=827317b428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qmzts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=827317b428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b6bb08cf-3315-4335-a5cd-aa3f157dfd78,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b6bb08cf-3315-4335-a5cd-aa3f157dfd78,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qmzts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=b6bb08cf-3315-4335-a5cd-aa3f157dfd78;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=b6bb08cf-3315-4335-a5cd-aa3f157dfd78;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=827317b428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identity=4859 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b6bb08cf-3315-4335-a5cd-aa3f157dfd78,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b6bb08cf-3315-4335-a5cd-aa3f157dfd78,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qmzts oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=827317b428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identity=4859 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qmzts subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=827317b428 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2446 identity=4859 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qmzts subsys=endpoint level=info msg="Successful endpoint creation" containerID=827317b428 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2446 identity=4859 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qmzts subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=827317b428 endpointID=2446 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-qmzts subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=b6bb08cf-3315-4335-a5cd-aa3f157dfd78 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=b6bb08cf-3315-4335-a5cd-aa3f157dfd78 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=827317b428 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2446 identity=4859 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qmzts subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 586f2f81-12ef-475a-b3b7-1a1c0fac89c5 default }" containerID=73085f6f50fe5fe45b8ae5f0921bf31b2f812689dd9fa14944908944c84fe267 datapathConfiguration="&{false false false false false }" interface=lxcf7de83399d30 k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqpgx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73085f6f50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 ipv4=10.0.0.208 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqpgx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73085f6f50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3d04f124-a835-46da-ae03-6b983962f259,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=3d04f124-a835-46da-ae03-6b983962f259,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.208 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqpgx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=73085f6f50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.208 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqpgx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=3d04f124-a835-46da-ae03-6b983962f259;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=3d04f124-a835-46da-ae03-6b983962f259;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73085f6f50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identity=18483 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3d04f124-a835-46da-ae03-6b983962f259,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=3d04f124-a835-46da-ae03-6b983962f259,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.208 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqpgx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73085f6f50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identity=18483 ipv4=10.0.0.208 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqpgx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73085f6f50 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=368 identity=18483 ipv4=10.0.0.208 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqpgx subsys=endpoint level=info msg="Successful endpoint creation" containerID=73085f6f50 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=368 identity=18483 ipv4=10.0.0.208 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqpgx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=73085f6f50 endpointID=368 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-zqpgx subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=3d04f124-a835-46da-ae03-6b983962f259 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=3d04f124-a835-46da-ae03-6b983962f259 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=73085f6f50 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=368 identity=18483 ipv4=10.0.0.208 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zqpgx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 0c2fa5b4-ad2c-488f-8069-1838f3a7f04b default }" containerID=bf313cf1dd2817daff2c8e00be0592da5934566b88fc47a568661dff36101d26 datapathConfiguration="&{false false false false false }" interface=lxc815bd6daa4cc k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w4zhn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf313cf1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 ipv4=10.0.0.237 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w4zhn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf313cf1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.237 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w4zhn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf313cf1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=3226 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.237 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w4zhn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bf313cf1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=3226 ipv4=10.0.0.237 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w4zhn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf313cf1dd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=42 identity=3226 ipv4=10.0.0.237 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w4zhn subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf313cf1dd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=42 identity=3226 ipv4=10.0.0.237 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w4zhn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.69 68e54809-cb32-4ec7-b1ca-9aca09dee5ce default }" containerID=defea0361d927d5b50944959b9ee0a0e633620c381bc97df5cfbc742b08688c4 datapathConfiguration="&{false false false false false }" interface=lxccb6fccca564f k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cxwxp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=defea0361d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 ipv4=10.0.0.69 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cxwxp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=defea0361d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=19e519d1-acd3-4057-9c82-9e5631127f1f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=19e519d1-acd3-4057-9c82-9e5631127f1f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.69 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cxwxp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=19e519d1-acd3-4057-9c82-9e5631127f1f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=19e519d1-acd3-4057-9c82-9e5631127f1f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=defea0361d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 identity=4068 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=19e519d1-acd3-4057-9c82-9e5631127f1f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=19e519d1-acd3-4057-9c82-9e5631127f1f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.69 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cxwxp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=defea0361d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 identity=4068 ipv4=10.0.0.69 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cxwxp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=defea0361d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=968 identity=4068 ipv4=10.0.0.69 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cxwxp subsys=endpoint level=info msg="Successful endpoint creation" containerID=defea0361d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=968 identity=4068 ipv4=10.0.0.69 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cxwxp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=defea0361d endpointID=968 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-cxwxp subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=19e519d1-acd3-4057-9c82-9e5631127f1f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=19e519d1-acd3-4057-9c82-9e5631127f1f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=defea0361d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=968 identity=4068 ipv4=10.0.0.69 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cxwxp subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3cd1e798-e0ec-42d0-97fa-af30736bb966] Description:}]" policyAddRequest=ae6082ff-7618-49ff-a499-d7e003b29cf8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ae6082ff-7618-49ff-a499-d7e003b29cf8 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=09239251-68b1-4963-a970-293c54acfe7d] Description:}]" policyAddRequest=32d5d026-26c4-4bbf-a388-824c05cf13cc subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=32d5d026-26c4-4bbf-a388-824c05cf13cc policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.24 e7bf62d2-f145-44b6-ad02-2cdd51c560f4 default }" containerID=1c9821664f029bfc3f8498db0aa7a0aedbf9783803974c072936aad3bc7c69c1 datapathConfiguration="&{false false false false false }" interface=lxc197d5a214c6e k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-4nvrw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c9821664f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-4nvrw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c9821664f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-4nvrw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1c9821664f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-4nvrw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c9821664f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identity=43347 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-4nvrw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c9821664f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identity=43347 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-4nvrw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c9821664f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1408 identity=43347 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-4nvrw subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c9821664f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1408 identity=43347 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-4nvrw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.152 eefded57-138d-45a1-bb16-807b4206ee68 default }" containerID=ee62ef79d00a54f3b00b5d4bc7e7e6e5455a94a04a115e85304e194445fa70fe datapathConfiguration="&{false false false false false }" interface=lxc1ecdf162b804 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dr2tk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee62ef79d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dr2tk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee62ef79d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dr2tk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee62ef79d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 identity=19032 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dr2tk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee62ef79d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 identity=19032 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dr2tk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ee62ef79d0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=392 identity=19032 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dr2tk subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee62ef79d0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=392 identity=19032 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dr2tk subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.136 bce99a5e-e8ed-4daa-ae64-0ca4c0d3e289 default }" containerID=303077b4af922959d17989b24818ac081076acfa6493207b31d7c42542c6f98d datapathConfiguration="&{false false false false false }" interface=lxc4e16623dc2c3 k8sPodName=openstack/pxc-operator-7cff949c8b-vtgfn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=303077b4af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vtgfn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=303077b4af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vtgfn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=303077b4af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 identity=19322 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vtgfn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=303077b4af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 identity=19322 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vtgfn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=303077b4af datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=787 identity=19322 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vtgfn subsys=endpoint level=info msg="Successful endpoint creation" containerID=303077b4af datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=787 identity=19322 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vtgfn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.231 c2c0b4a6-eb24-4b82-93be-111b00be9fee default }" containerID=44bd3a8a270ec8f4a90e593d1d602d4927a36df649459e3083afe3632942d91b datapathConfiguration="&{false false false false false }" interface=lxce852644266e3 k8sPodName=local-path-storage/helper-pod-create-pvc-30d26d62-2b24-4bd8-8f5a-0566359630fc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44bd3a8a27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2830 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30d26d62-2b24-4bd8-8f5a-0566359630fc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44bd3a8a27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2830 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30d26d62-2b24-4bd8-8f5a-0566359630fc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=44bd3a8a27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2830 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30d26d62-2b24-4bd8-8f5a-0566359630fc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44bd3a8a27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2830 identity=25619 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30d26d62-2b24-4bd8-8f5a-0566359630fc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44bd3a8a27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2830 identity=25619 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30d26d62-2b24-4bd8-8f5a-0566359630fc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44bd3a8a27 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2830 identity=25619 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30d26d62-2b24-4bd8-8f5a-0566359630fc subsys=endpoint level=info msg="Successful endpoint creation" containerID=44bd3a8a27 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2830 identity=25619 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30d26d62-2b24-4bd8-8f5a-0566359630fc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.228 84b56154-3dfa-4fe9-8cb7-bd18d5c48d88 default }" containerID=19a6908d4e07c10d9ee4fcb16d37c77f4ae1b5b70846b7ef9a1dd11101318e49 datapathConfiguration="&{false false false false false }" interface=lxc5780b453897c k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19a6908d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19a6908d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19a6908d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 identity=43792 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19a6908d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 identity=43792 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19a6908d4e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=486 identity=43792 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19a6908d4e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=486 identity=43792 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=44bd3a8a27 endpointID=2830 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-30d26d62-2b24-4bd8-8f5a-0566359630fc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=44bd3a8a27 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2830 identity=25619 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30d26d62-2b24-4bd8-8f5a-0566359630fc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 8a56c363-879b-4f8e-aeec-2cf044bf9eb7 default }" containerID=af6fd44b06502d76337d660af29486319913ba258a15e564eff8dd51e9b4ed56 datapathConfiguration="&{false false false false false }" interface=lxc50adf1a3e6d6 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af6fd44b06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af6fd44b06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=af6fd44b06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af6fd44b06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 identity=46237 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af6fd44b06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 identity=46237 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af6fd44b06 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3318 identity=46237 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af6fd44b06 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3318 identity=46237 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f2e41482-01a2-4ad2-b0a9-88ebd58a72d3] Description:}]" policyAddRequest=06431d7f-ecc9-418f-8fb1-fdd6df4548e7 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=06431d7f-ecc9-418f-8fb1-fdd6df4548e7 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.159 048a538a-d7c1-456e-8ef2-0827c889ae77 default }" containerID=47010457b218c19b01ff518e418a4ad4691be800d03e28aa4829992fe4bc11e3 datapathConfiguration="&{false false false false false }" interface=lxc94a135110be6 k8sPodName=local-path-storage/helper-pod-create-pvc-51c719a0-5675-409f-819b-d3a078587f86 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47010457b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51c719a0-5675-409f-819b-d3a078587f86 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47010457b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51c719a0-5675-409f-819b-d3a078587f86 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47010457b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identity=25619 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51c719a0-5675-409f-819b-d3a078587f86 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47010457b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identity=25619 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51c719a0-5675-409f-819b-d3a078587f86 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=47010457b2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4092 identity=25619 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51c719a0-5675-409f-819b-d3a078587f86 subsys=endpoint level=info msg="Successful endpoint creation" containerID=47010457b2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4092 identity=25619 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51c719a0-5675-409f-819b-d3a078587f86 subsys=daemon level=info msg="Delete endpoint request" containerID=47010457b2 endpointID=4092 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-51c719a0-5675-409f-819b-d3a078587f86 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=47010457b2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4092 identity=25619 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51c719a0-5675-409f-819b-d3a078587f86 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 87dc123c-1f0b-4474-ba1b-3a60db532431 default }" containerID=27be920ba93b3cb02be507c1be49044dbb9495e3000dae6c323f14c7c5f3ac36 datapathConfiguration="&{false false false false false }" interface=lxc00dcb1aa1f6f k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27be920ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2893 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27be920ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2893 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=27be920ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2893 identity=39676 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27be920ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2893 identity=39676 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=27be920ba9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2893 identity=39676 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=27be920ba9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2893 identity=39676 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=88793223-b260-4fc4-b91f-a6137fb51ea8] Description:}]" policyAddRequest=13448efd-280e-4e71-b5f3-fbafbb7e37a8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=13448efd-280e-4e71-b5f3-fbafbb7e37a8 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.197 ab0f8089-9be8-4dbf-8dd1-caaf3d055d76 default }" containerID=1b1e7d7f44ed46852632b33795cd168218e93d15a549bb7510898820823d630c datapathConfiguration="&{false false false false false }" interface=lxc9947d6551d4b k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b1e7d7f44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 ipv4=10.0.0.197 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b1e7d7f44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.197 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b1e7d7f44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 identity=47195 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.197 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b1e7d7f44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 identity=47195 ipv4=10.0.0.197 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b1e7d7f44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3256 identity=47195 ipv4=10.0.0.197 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b1e7d7f44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3256 identity=47195 ipv4=10.0.0.197 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00558321046437702 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.56 6d61b62d-ae0e-46be-875d-6889a0f8abd0 default }" containerID=8a932a4d39e4284a5f9a87aeb76e0dea617d0f92d8b0365d51fe66abfc1a6a25 datapathConfiguration="&{false false false false false }" interface=lxcd88bab1f21c2 k8sPodName=monitoring/node-feature-discovery-worker-phtk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a932a4d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-phtk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a932a4d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-phtk7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a932a4d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 identity=55436 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-phtk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a932a4d39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 identity=55436 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-phtk7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a932a4d39 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1616 identity=55436 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-phtk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a932a4d39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1616 identity=55436 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-phtk7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.186 dbe25bb7-ee94-411a-8652-c784aa6eb773 default }" containerID=6d8caa3d984fb5a1247c5df2b589a714b3ba4f13c09130e2b9bd6e74da6788c7 datapathConfiguration="&{false false false false false }" interface=lxca14dd0e04e02 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ds2bh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d8caa3d98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3901 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ds2bh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d8caa3d98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3901 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ds2bh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.68 ec8d144b-f85f-4278-a22e-607821158881 default }" containerID=832e1e2f6537e0d875e9995483bc25f5ddf576dc6242443586b17a76631e08f5 datapathConfiguration="&{false false false false false }" interface=lxca9233072c81b k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-gbhpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=832e1e2f65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-gbhpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=832e1e2f65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-gbhpv subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d8caa3d98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3901 identity=14092 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ds2bh oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=6d8caa3d98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3901 identity=14092 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ds2bh subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=832e1e2f65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=2396 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-gbhpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=832e1e2f65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=2396 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-gbhpv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d8caa3d98 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3901 identity=14092 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ds2bh subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d8caa3d98 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3901 identity=14092 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ds2bh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=832e1e2f65 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2047 identity=2396 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-gbhpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=832e1e2f65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2047 identity=2396 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-gbhpv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.31 fcbaca99-d132-4d93-98f8-b6e477f8edd9 default }" containerID=5f397ed81f3c274488b99f2b9d7e336ec3e9e6e7379c68846920f6b91c1ec27b datapathConfiguration="&{false false false false false }" interface=lxce2af787c520d k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lr7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f397ed81f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 ipv4=10.0.0.31 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lr7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f397ed81f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.31 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lr7d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f397ed81f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identity=16524 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.31 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lr7d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f397ed81f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identity=16524 ipv4=10.0.0.31 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lr7d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5f397ed81f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2186 identity=16524 ipv4=10.0.0.31 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lr7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f397ed81f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2186 identity=16524 ipv4=10.0.0.31 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lr7d subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1991 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01991 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01991 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01991 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01991:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1991 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 d2f273b4-316c-4fa3-b1c9-e7c420504e6c default }" containerID=7ce2c34cc427e2fb3ba927ed8efd6a6d43f506601df7ae2b1743dd05d98f1bf1 datapathConfiguration="&{false false false false false }" interface=lxc468b40021cf5 k8sPodName=monitoring/kube-prometheus-stack-admission-create-whfvm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ce2c34cc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-whfvm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ce2c34cc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=f6952940-151c-47e9-9e20-3dd2857d9ead,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=f6952940-151c-47e9-9e20-3dd2857d9ead,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-whfvm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=f6952940-151c-47e9-9e20-3dd2857d9ead;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=f6952940-151c-47e9-9e20-3dd2857d9ead;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7ce2c34cc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 identity=23353 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=f6952940-151c-47e9-9e20-3dd2857d9ead,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=f6952940-151c-47e9-9e20-3dd2857d9ead,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-whfvm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ce2c34cc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3739 identity=23353 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-whfvm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ce2c34cc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3739 identity=23353 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-whfvm subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ce2c34cc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3739 identity=23353 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-whfvm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ce2c34cc4 endpointID=3739 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-whfvm subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=f6952940-151c-47e9-9e20-3dd2857d9ead k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=f6952940-151c-47e9-9e20-3dd2857d9ead k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=7ce2c34cc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3739 identity=23353 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-whfvm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 d43ddc5b-bb59-47fc-943f-68548cd359f7 default }" containerID=2bf19f8122b46701cbb73c4628328ee175e138cd6b3c5274e7aa9b3fe71d8078 datapathConfiguration="&{false false false false false }" interface=lxc0d797ebfaf0a k8sPodName=monitoring/kube-prometheus-stack-grafana-69cdf6764c-pbwt6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bf19f8122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3230 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69cdf6764c-pbwt6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bf19f8122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3230 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69cdf6764c-pbwt6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2bf19f8122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3230 identity=1615 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69cdf6764c-pbwt6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2bf19f8122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3230 identity=1615 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69cdf6764c-pbwt6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 34f0da7a-b7f2-4a5c-9498-a1a2c98ddde0 default }" containerID=8d09d1a6b3d05d2dc77fe05b9641e47e400b5f5eda60db9540379b37b93f68db datapathConfiguration="&{false false false false false }" interface=lxc38a17059a40d k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2rjns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d09d1a6b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3216 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2rjns subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 8da1c35a-defc-4dbe-a348-a25d779690c7 default }" containerID=7516f7fc57e946dfe12946227f88e2d29bed216b1811b30d37db6e816976320a datapathConfiguration="&{false false false false false }" interface=lxc54e12bac8049 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-7kk6r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7516f7fc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-7kk6r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d09d1a6b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3216 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2rjns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7516f7fc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-7kk6r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7516f7fc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identity=38297 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-7kk6r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7516f7fc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identity=38297 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-7kk6r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d09d1a6b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3216 identity=14216 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2rjns oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d09d1a6b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3216 identity=14216 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2rjns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2bf19f8122 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3230 identity=1615 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69cdf6764c-pbwt6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bf19f8122 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3230 identity=1615 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69cdf6764c-pbwt6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7516f7fc57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1154 identity=38297 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-7kk6r subsys=endpoint level=info msg="Successful endpoint creation" containerID=7516f7fc57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1154 identity=38297 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-7kk6r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8d09d1a6b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3216 identity=14216 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2rjns subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d09d1a6b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3216 identity=14216 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2rjns subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.3 81c53cba-6546-4541-80e8-c45850d8a542 default }" containerID=cfefa6ce6a587fe57877df2eab0a209f043dfabd8ea9098a284a21dfe60c2c63 datapathConfiguration="&{false false false false false }" interface=lxcd3edb1c134fc k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ddh9p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cfefa6ce6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ddh9p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cfefa6ce6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=4288ab73-4212-4547-957c-ae94e090d8ea,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=4288ab73-4212-4547-957c-ae94e090d8ea,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ddh9p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=4288ab73-4212-4547-957c-ae94e090d8ea;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=4288ab73-4212-4547-957c-ae94e090d8ea;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cfefa6ce6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 identity=8994 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=4288ab73-4212-4547-957c-ae94e090d8ea,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=4288ab73-4212-4547-957c-ae94e090d8ea,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ddh9p oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cfefa6ce6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 identity=8994 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ddh9p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cfefa6ce6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3694 identity=8994 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ddh9p subsys=endpoint level=info msg="Successful endpoint creation" containerID=cfefa6ce6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3694 identity=8994 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ddh9p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cfefa6ce6a endpointID=3694 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-ddh9p subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=4288ab73-4212-4547-957c-ae94e090d8ea k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=4288ab73-4212-4547-957c-ae94e090d8ea k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=cfefa6ce6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3694 identity=8994 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ddh9p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 64fc840a-68f2-41d9-9a33-e19f51991181 default }" containerID=353b7d3193dcd6c8f18469f2da40586c6d669c51aaca1aa7700341ebec565cff datapathConfiguration="&{false false false false false }" interface=lxc17585d47c1b5 k8sPodName=monitoring/loki-gateway-cf54cb88c-cbz4p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=353b7d3193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cbz4p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=353b7d3193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cbz4p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=353b7d3193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identity=24866 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cbz4p oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=353b7d3193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identity=24866 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cbz4p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 305f180c-c42c-452a-b447-a614694ce7cd default }" containerID=27cab163a4331897c4b564024a779c959cdfd1c19367b59813be383e386eb89c datapathConfiguration="&{false false false false false }" interface=lxc1d621565fb2e k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27cab163a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 153e802a-02e7-4f08-ae79-5414c96be98a default }" containerID=3687bef42948744c68b39fed4fb84fa573291a91cd9752b980a379943c943b68 datapathConfiguration="&{false false false false false }" interface=lxca09831d5b5ed k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3687bef429 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27cab163a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3687bef429 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27cab163a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 identity=14563 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=27cab163a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 identity=14563 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3687bef429 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=9838 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3687bef429 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=9838 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=353b7d3193 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=280 identity=24866 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cbz4p subsys=endpoint level=info msg="Successful endpoint creation" containerID=353b7d3193 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=280 identity=24866 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cbz4p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.100 28ad75d4-0016-41c1-920a-926e22f0a5da default }" containerID=a2e77852325994f2b191764179549186b72cba9d079964323ca06c0a1bd054fc datapathConfiguration="&{false false false false false }" interface=lxca886007560b4 k8sPodName=local-path-storage/helper-pod-create-pvc-93548f8c-073d-4fc6-9d18-c7890291f195 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2e7785232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2699 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93548f8c-073d-4fc6-9d18-c7890291f195 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2e7785232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2699 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93548f8c-073d-4fc6-9d18-c7890291f195 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2e7785232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2699 identity=25619 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93548f8c-073d-4fc6-9d18-c7890291f195 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2e7785232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2699 identity=25619 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93548f8c-073d-4fc6-9d18-c7890291f195 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=27cab163a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=188 identity=14563 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=27cab163a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=188 identity=14563 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3687bef429 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=449 identity=9838 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3687bef429 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=449 identity=9838 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a2e7785232 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2699 identity=25619 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93548f8c-073d-4fc6-9d18-c7890291f195 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2e7785232 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2699 identity=25619 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93548f8c-073d-4fc6-9d18-c7890291f195 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.171 4ea31643-d537-4c62-ba03-ac171a93286d default }" containerID=ae6cf0213f3cbd13be837fb8112247fac39d1057dd80809698927cb7061902e3 datapathConfiguration="&{false false false false false }" interface=lxc336a190eb197 k8sPodName=local-path-storage/helper-pod-create-pvc-6e29fc72-0f3d-4725-904a-79f7eb4ec068 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae6cf0213f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1393 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e29fc72-0f3d-4725-904a-79f7eb4ec068 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae6cf0213f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1393 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e29fc72-0f3d-4725-904a-79f7eb4ec068 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ae6cf0213f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1393 identity=25619 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e29fc72-0f3d-4725-904a-79f7eb4ec068 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae6cf0213f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1393 identity=25619 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e29fc72-0f3d-4725-904a-79f7eb4ec068 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 c708045d-4bca-42d5-9401-2034f60661b1 default }" containerID=d8af409b0e00d5f7d4fa584a7ae30308ca3bdc76b8ecc5d47c8969c2e32cf189 datapathConfiguration="&{false false false false false }" interface=lxcf6735fd45632 k8sPodName=local-path-storage/helper-pod-create-pvc-c4f66f92-513f-46b0-88a8-1bc59d28374f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8af409b0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3611 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4f66f92-513f-46b0-88a8-1bc59d28374f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8af409b0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3611 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4f66f92-513f-46b0-88a8-1bc59d28374f subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d8af409b0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3611 identity=25619 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4f66f92-513f-46b0-88a8-1bc59d28374f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8af409b0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3611 identity=25619 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4f66f92-513f-46b0-88a8-1bc59d28374f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae6cf0213f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1393 identity=25619 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e29fc72-0f3d-4725-904a-79f7eb4ec068 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae6cf0213f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1393 identity=25619 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e29fc72-0f3d-4725-904a-79f7eb4ec068 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d8af409b0e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3611 identity=25619 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4f66f92-513f-46b0-88a8-1bc59d28374f subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8af409b0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3611 identity=25619 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4f66f92-513f-46b0-88a8-1bc59d28374f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.3 f52cf2e0-0c26-427f-b055-6bc8e41d6ddd default }" containerID=49a6012b96d28fa3321baf88399fbaaf6ed972247b39b38deec3ea5a9df7a9a9 datapathConfiguration="&{false false false false false }" interface=lxc12494491fe16 k8sPodName=monitoring/vector-tm2nq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49a6012b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/vector-tm2nq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49a6012b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/vector-tm2nq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=49a6012b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/vector-tm2nq line=611 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=49a6012b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/vector-tm2nq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49a6012b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 identity=8805 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/vector-tm2nq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49a6012b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 identity=8805 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/vector-tm2nq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49a6012b96 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2357 identity=8805 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/vector-tm2nq subsys=endpoint level=info msg="Successful endpoint creation" containerID=49a6012b96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2357 identity=8805 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/vector-tm2nq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.110 042b9962-7836-4a33-b75d-0417223340d7 default }" containerID=b245ee505e50f3cb989f00c42a1aba44de5b4b9638035fcab426a7a0417332a5 datapathConfiguration="&{false false false false false }" interface=lxc5453884dfe3c k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lwcln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b245ee505e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lwcln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b245ee505e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lwcln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b245ee505e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 identity=22643 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lwcln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b245ee505e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 identity=22643 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lwcln subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b245ee505e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=704 identity=22643 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lwcln subsys=endpoint level=info msg="Successful endpoint creation" containerID=b245ee505e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=704 identity=22643 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lwcln subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a2e7785232 endpointID=2699 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-93548f8c-073d-4fc6-9d18-c7890291f195 subsys=daemon level=info msg="Delete endpoint request" containerID=d8af409b0e endpointID=3611 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c4f66f92-513f-46b0-88a8-1bc59d28374f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=ae6cf0213f endpointID=1393 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6e29fc72-0f3d-4725-904a-79f7eb4ec068 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a2e7785232 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2699 identity=25619 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93548f8c-073d-4fc6-9d18-c7890291f195 subsys=endpoint level=info msg="Removed endpoint" containerID=d8af409b0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3611 identity=25619 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4f66f92-513f-46b0-88a8-1bc59d28374f subsys=endpoint level=info msg="Removed endpoint" containerID=ae6cf0213f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1393 identity=25619 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e29fc72-0f3d-4725-904a-79f7eb4ec068 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 8f0c782c-c9d2-4253-a9ea-f800bf7210d7 default }" containerID=8407456c6158cf399675ddb5adfc0f1957acffc7cd5e30b3a72870ce9be4a2c7 datapathConfiguration="&{false false false false false }" interface=lxcdd0ede0a4196 k8sPodName=openstack/memcached-memcached-6479589586-zqzpk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8407456c61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-zqzpk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8407456c61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-zqzpk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8407456c61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=38599 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-zqzpk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8407456c61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=38599 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-zqzpk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.159 6803c498-8c94-41fa-81b7-44e87ff2ae62 default }" containerID=13ad1cb5046ca648b6287660636a47b6b1c7ffb73d886e94abc1c493974b3d1a datapathConfiguration="&{false false false false false }" interface=lxc7be5db76c997 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13ad1cb504 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4054 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13ad1cb504 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4054 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13ad1cb504 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4054 identity=20952 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13ad1cb504 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4054 identity=20952 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8407456c61 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=490 identity=38599 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-zqzpk subsys=endpoint level=info msg="Successful endpoint creation" containerID=8407456c61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=490 identity=38599 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-zqzpk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=13ad1cb504 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4054 identity=20952 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=13ad1cb504 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4054 identity=20952 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.63 32bf9c7e-7136-4ab5-85a1-9b987b3d9862 default }" containerID=72abf098a05f55ac1adde9ee3fa97291cce76a98828d919e03e32ad009e1f401 datapathConfiguration="&{false false false false false }" interface=lxc04cc397cba54 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72abf098a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72abf098a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=72abf098a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 identity=63671 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72abf098a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 identity=63671 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72abf098a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1582 identity=63671 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=72abf098a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1582 identity=63671 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.246 7b525bab-df9d-4e10-90e1-0c4f85c2a2d1 default }" containerID=bc86e62ea21f1e59646747945aa27db5de34b18e4fcdf62f5c3b97bf9fb52e8d datapathConfiguration="&{false false false false false }" interface=lxc0408f3caa93f k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc86e62ea2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1423 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc86e62ea2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1423 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc86e62ea2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1423 identity=50522 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc86e62ea2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1423 identity=50522 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc86e62ea2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1423 identity=50522 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc86e62ea2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1423 identity=50522 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.129 2f4a1c15-e1a6-4b66-a76a-f6b33df0270c default }" containerID=917adf3ab62f690e5cbe54c11727e999321f7e2503dd7cff49d0dcc6a1cf2686 datapathConfiguration="&{false false false false false }" interface=lxc9dcb9805f0e2 k8sPodName=local-path-storage/helper-pod-create-pvc-f7925229-3a57-46b9-8b3b-39b004075964 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=917adf3ab6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2431 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f7925229-3a57-46b9-8b3b-39b004075964 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=917adf3ab6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2431 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f7925229-3a57-46b9-8b3b-39b004075964 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=917adf3ab6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2431 identity=25619 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f7925229-3a57-46b9-8b3b-39b004075964 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=917adf3ab6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2431 identity=25619 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f7925229-3a57-46b9-8b3b-39b004075964 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=917adf3ab6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2431 identity=25619 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f7925229-3a57-46b9-8b3b-39b004075964 subsys=endpoint level=info msg="Successful endpoint creation" containerID=917adf3ab6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2431 identity=25619 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f7925229-3a57-46b9-8b3b-39b004075964 subsys=daemon level=info msg="Delete endpoint request" containerID=917adf3ab6 endpointID=2431 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f7925229-3a57-46b9-8b3b-39b004075964 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=917adf3ab6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2431 identity=25619 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f7925229-3a57-46b9-8b3b-39b004075964 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 92a4348f-0c71-49e8-8c68-b43f795be441 default }" containerID=e972b330c8344acd2e0177a0dc012a311aa4fc058444b568414c38260c7468bd datapathConfiguration="&{false false false false false }" interface=lxc76581121d3ad k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e972b330c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4083 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e972b330c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4083 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e972b330c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4083 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e972b330c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4083 identity=37609 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e972b330c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4083 identity=37609 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e972b330c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4083 identity=37609 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e972b330c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4083 identity=37609 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.029431060370365362 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.212 7bae4747-8b71-47ab-8fcb-eb57799d8dce default }" containerID=c9c3ced11f031fe521ceb7790210e85ce786ae5cb451ec78ca57f60b07d82310 datapathConfiguration="&{false false false false false }" interface=lxc30b626144030 k8sPodName=openstack/keystone-api-668bb6d4d9-qfvpg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9c3ced11f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2158 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-api-668bb6d4d9-qfvpg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9c3ced11f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2158 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-api-668bb6d4d9-qfvpg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c9c3ced11f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2158 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-api-668bb6d4d9-qfvpg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9c3ced11f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2158 identity=20978 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-api-668bb6d4d9-qfvpg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9c3ced11f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2158 identity=20978 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-api-668bb6d4d9-qfvpg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9c3ced11f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2158 identity=20978 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-api-668bb6d4d9-qfvpg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9c3ced11f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2158 identity=20978 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-api-668bb6d4d9-qfvpg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.38 df1d74ee-6df1-4157-b6ff-9a02f666b171 default }" containerID=52aebcda3796c4e7bbbed8ef712d5963ca722bff40435d897fa6dfcfeb281511 datapathConfiguration="&{false false false false false }" interface=lxcba80acbb1f20 k8sPodName=openstack/keystone-credential-setup-wjkz7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52aebcda37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-wjkz7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52aebcda37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9968cb57-826c-4f8d-a6ca-c2f0d249b008,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=9968cb57-826c-4f8d-a6ca-c2f0d249b008,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-wjkz7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9968cb57-826c-4f8d-a6ca-c2f0d249b008;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=9968cb57-826c-4f8d-a6ca-c2f0d249b008;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52aebcda37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identity=37654 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9968cb57-826c-4f8d-a6ca-c2f0d249b008,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=9968cb57-826c-4f8d-a6ca-c2f0d249b008,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-wjkz7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52aebcda37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identity=37654 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-wjkz7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52aebcda37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=283 identity=37654 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-wjkz7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=52aebcda37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=283 identity=37654 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-wjkz7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=warning msg="Network status error received, restarting client connections" error="an error on the server (\"[+]ping ok\\n[+]log ok\\n[-]etcd failed: reason withheld\\n[+]poststarthook/start-kube-apiserver-admission-initializer ok\\n[+]poststarthook/generic-apiserver-start-informers ok\\n[+]poststarthook/priority-and-fairness-config-consumer ok\\n[+]poststarthook/priority-and-fairness-filter ok\\n[+]poststarthook/storage-object-count-tracker-hook ok\\n[+]poststarthook/start-apiextensions-informers ok\\n[+]poststarthook/start-apiextensions-controllers ok\\n[+]poststarthook/crd-informer-synced ok\\n[+]poststarthook/start-service-ip-repair-controllers ok\\n[+]poststarthook/rbac/bootstrap-roles ok\\n[+]poststarthook/scheduling/bootstrap-system-priority-classes ok\\n[+]poststarthook/priority-and-fairness-config-producer ok\\n[+]poststarthook/start-system-namespaces-controller ok\\n[+]poststarthook/bootstrap-controller ok\\n[+]poststarthook/start-cluster-authentication-info-controller ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-controller ok\\n[+]poststarthook/start-deprecated-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-legacy-token-tracking-controller ok\\n[+]poststarthook/aggregator-reload-proxy-client-cert ok\\n[+]poststarthook/start-kube-aggregator-informers ok\\n[+]poststarthook/apiservice-registration-controller ok\\n[+]poststarthook/apiservice-status-available-controller ok\\n[+]poststarthook/kube-apiserver-autoregistration ok\\n[+]autoregister-completion ok\\n[+]poststarthook/apiservice-openapi-controller ok\\n[+]poststarthook/apiservice-openapiv3-controller ok\\n[+]poststarthook/apiservice-discovery-controller ok\\nhealthz check failed\") has prevented the request from succeeding (get healthz.meta.k8s.io)" subsys=k8s-client level=info msg="Delete endpoint request" containerID=52aebcda37 endpointID=283 k8sNamespace=openstack k8sPodName=keystone-credential-setup-wjkz7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9968cb57-826c-4f8d-a6ca-c2f0d249b008 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=9968cb57-826c-4f8d-a6ca-c2f0d249b008 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=52aebcda37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=283 identity=37654 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-wjkz7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 2d657837-bf9a-4dba-bcaa-b324aa271ac3 default }" containerID=f09a1af27b1dc3198605db7a2301fd577b925186da8c46af27e0318e7bed8c54 datapathConfiguration="&{false false false false false }" interface=lxc0d8d7d533e0f k8sPodName=openstack/keystone-db-init-r8ldl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f09a1af27b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-db-init-r8ldl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f09a1af27b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=284bd5a2-7498-4ae4-a621-e6aa344df6bd,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=284bd5a2-7498-4ae4-a621-e6aa344df6bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-db-init-r8ldl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=284bd5a2-7498-4ae4-a621-e6aa344df6bd;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=284bd5a2-7498-4ae4-a621-e6aa344df6bd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f09a1af27b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identity=58578 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=284bd5a2-7498-4ae4-a621-e6aa344df6bd,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=284bd5a2-7498-4ae4-a621-e6aa344df6bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-db-init-r8ldl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f09a1af27b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identity=58578 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-db-init-r8ldl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f09a1af27b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=858 identity=58578 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-db-init-r8ldl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f09a1af27b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=858 identity=58578 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-db-init-r8ldl subsys=daemon level=info msg="Delete endpoint request" containerID=f09a1af27b endpointID=858 k8sNamespace=openstack k8sPodName=keystone-db-init-r8ldl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=284bd5a2-7498-4ae4-a621-e6aa344df6bd k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=284bd5a2-7498-4ae4-a621-e6aa344df6bd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f09a1af27b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=858 identity=58578 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-db-init-r8ldl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 549498b9-672e-42f2-8461-1587d37f4810 default }" containerID=223c2bf4b3cf4d536201d892b6b072139189b9192243d5c95ed7010ea26eb699 datapathConfiguration="&{false false false false false }" interface=lxc7f2e02a2936d k8sPodName=openstack/keystone-fernet-setup-lk4j9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=223c2bf4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-fernet-setup-lk4j9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=223c2bf4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4a1992e5-ef04-4619-a8b5-360811608d6a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=4a1992e5-ef04-4619-a8b5-360811608d6a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-fernet-setup-lk4j9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=223c2bf4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-fernet-setup-lk4j9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4a1992e5-ef04-4619-a8b5-360811608d6a;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=4a1992e5-ef04-4619-a8b5-360811608d6a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=223c2bf4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 identity=20027 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4a1992e5-ef04-4619-a8b5-360811608d6a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=4a1992e5-ef04-4619-a8b5-360811608d6a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-fernet-setup-lk4j9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=223c2bf4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 identity=20027 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-fernet-setup-lk4j9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=223c2bf4b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3538 identity=20027 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-fernet-setup-lk4j9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=223c2bf4b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3538 identity=20027 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-fernet-setup-lk4j9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=223c2bf4b3 endpointID=3538 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-lk4j9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4a1992e5-ef04-4619-a8b5-360811608d6a k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=4a1992e5-ef04-4619-a8b5-360811608d6a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=223c2bf4b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3538 identity=20027 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-fernet-setup-lk4j9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 e91c1da8-4704-4fa1-b532-065d903fd705 default }" containerID=a026328f7dec28e22c3529bb0b374b8820edd76209a26a2fbd9ed7b48f967c2f datapathConfiguration="&{false false false false false }" interface=lxcd0ac48161215 k8sPodName=openstack/keystone-db-sync-nn58h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a026328f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-sync-nn58h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a026328f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e9f26f43-afc8-4f38-bd9b-c4e2d0f3df7c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=e9f26f43-afc8-4f38-bd9b-c4e2d0f3df7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-sync-nn58h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e9f26f43-afc8-4f38-bd9b-c4e2d0f3df7c;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=e9f26f43-afc8-4f38-bd9b-c4e2d0f3df7c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a026328f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identity=3699 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e9f26f43-afc8-4f38-bd9b-c4e2d0f3df7c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=e9f26f43-afc8-4f38-bd9b-c4e2d0f3df7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-sync-nn58h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a026328f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identity=3699 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-sync-nn58h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a026328f7d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1163 identity=3699 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-sync-nn58h subsys=endpoint level=info msg="Successful endpoint creation" containerID=a026328f7d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1163 identity=3699 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-sync-nn58h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a026328f7d endpointID=1163 k8sNamespace=openstack k8sPodName=keystone-db-sync-nn58h subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e9f26f43-afc8-4f38-bd9b-c4e2d0f3df7c k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=e9f26f43-afc8-4f38-bd9b-c4e2d0f3df7c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a026328f7d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1163 identity=3699 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-sync-nn58h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 d241f740-0c10-4fe9-812d-bc7fd6d8b0e6 default }" containerID=c5ef445aab5c5fea9462ab3b9244b86832f8122626bc5390b0c51dffa0c37cd2 datapathConfiguration="&{false false false false false }" interface=lxca3996081b34e k8sPodName=openstack/keystone-rabbit-init-5qnx6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5ef445aab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-5qnx6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5ef445aab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2aae05cb-5b74-4252-b098-ca8a8f4e5b1e,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2aae05cb-5b74-4252-b098-ca8a8f4e5b1e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-5qnx6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c5ef445aab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-5qnx6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2aae05cb-5b74-4252-b098-ca8a8f4e5b1e;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2aae05cb-5b74-4252-b098-ca8a8f4e5b1e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5ef445aab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=56177 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2aae05cb-5b74-4252-b098-ca8a8f4e5b1e,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2aae05cb-5b74-4252-b098-ca8a8f4e5b1e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-5qnx6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5ef445aab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=56177 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-5qnx6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5ef445aab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=789 identity=56177 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-5qnx6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5ef445aab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=789 identity=56177 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-5qnx6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c5ef445aab endpointID=789 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-5qnx6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2aae05cb-5b74-4252-b098-ca8a8f4e5b1e k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2aae05cb-5b74-4252-b098-ca8a8f4e5b1e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c5ef445aab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=789 identity=56177 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-5qnx6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 4275711c-296b-4b3b-858a-2403a9ae267a default }" containerID=d6abd9efce54e0037d39f4557433ed8e04ee65a901338cc17fde48b3f1de6a49 datapathConfiguration="&{false false false false false }" interface=lxc87bdf91703d7 k8sPodName=openstack/keystone-domain-manage-v88ht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6abd9efce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-domain-manage-v88ht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6abd9efce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=35bc1699-f652-4ada-9668-a5ec9206ac1e,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=35bc1699-f652-4ada-9668-a5ec9206ac1e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-domain-manage-v88ht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d6abd9efce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-domain-manage-v88ht line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=35bc1699-f652-4ada-9668-a5ec9206ac1e;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=35bc1699-f652-4ada-9668-a5ec9206ac1e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6abd9efce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 identity=5508 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=35bc1699-f652-4ada-9668-a5ec9206ac1e,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=35bc1699-f652-4ada-9668-a5ec9206ac1e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-domain-manage-v88ht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6abd9efce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 identity=5508 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-domain-manage-v88ht subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6abd9efce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2419 identity=5508 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-domain-manage-v88ht subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6abd9efce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2419 identity=5508 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-domain-manage-v88ht subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d6abd9efce endpointID=2419 k8sNamespace=openstack k8sPodName=keystone-domain-manage-v88ht subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=35bc1699-f652-4ada-9668-a5ec9206ac1e k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=35bc1699-f652-4ada-9668-a5ec9206ac1e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d6abd9efce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2419 identity=5508 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-domain-manage-v88ht subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 e655fd31-6b4b-42e6-904d-6202e74f1dc1 default }" containerID=f5fb56d9fc31625477d793178642affa7875344ae3bf9044cd2157294ffe454f datapathConfiguration="&{false false false false false }" interface=lxc216dbdcd8c21 k8sPodName=openstack/keystone-bootstrap-grjrn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5fb56d9fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-bootstrap-grjrn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5fb56d9fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2aeddd77-d1c8-4db8-afcc-1fdad501ab59,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=2aeddd77-d1c8-4db8-afcc-1fdad501ab59,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-bootstrap-grjrn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2aeddd77-d1c8-4db8-afcc-1fdad501ab59;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=2aeddd77-d1c8-4db8-afcc-1fdad501ab59;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5fb56d9fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identity=10470 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2aeddd77-d1c8-4db8-afcc-1fdad501ab59,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=2aeddd77-d1c8-4db8-afcc-1fdad501ab59,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-bootstrap-grjrn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5fb56d9fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identity=10470 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-bootstrap-grjrn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f5fb56d9fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2446 identity=10470 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-bootstrap-grjrn subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5fb56d9fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2446 identity=10470 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-bootstrap-grjrn subsys=daemon level=info msg="Delete endpoint request" containerID=f5fb56d9fc endpointID=2446 k8sNamespace=openstack k8sPodName=keystone-bootstrap-grjrn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2aeddd77-d1c8-4db8-afcc-1fdad501ab59 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=2aeddd77-d1c8-4db8-afcc-1fdad501ab59 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f5fb56d9fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2446 identity=10470 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-bootstrap-grjrn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 e7ae101e-2599-4e99-bf46-dc491069d00b default }" containerID=293dc38837cbe65218f19d5b8bb93cecc0c969321cf5e91cea1546cf34b58d24 datapathConfiguration="&{false false false false false }" interface=lxcdc8606ee1d89 k8sPodName=local-path-storage/helper-pod-create-pvc-961b7faa-4b45-4ff4-b699-5e5a0bf833db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=293dc38837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-961b7faa-4b45-4ff4-b699-5e5a0bf833db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=293dc38837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-961b7faa-4b45-4ff4-b699-5e5a0bf833db subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=293dc38837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identity=25619 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-961b7faa-4b45-4ff4-b699-5e5a0bf833db oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=293dc38837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identity=25619 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-961b7faa-4b45-4ff4-b699-5e5a0bf833db subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=293dc38837 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1310 identity=25619 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-961b7faa-4b45-4ff4-b699-5e5a0bf833db subsys=endpoint level=info msg="Successful endpoint creation" containerID=293dc38837 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1310 identity=25619 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-961b7faa-4b45-4ff4-b699-5e5a0bf833db subsys=daemon level=info msg="Delete endpoint request" containerID=293dc38837 endpointID=1310 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-961b7faa-4b45-4ff4-b699-5e5a0bf833db subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=293dc38837 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1310 identity=25619 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-961b7faa-4b45-4ff4-b699-5e5a0bf833db subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 89c1c1ef-6ee1-4738-a4ab-af14a831fc20 default }" containerID=b6cb29660b509616f6afe7ea6a903edfea2388b79c32ebe37efaea8a21627783 datapathConfiguration="&{false false false false false }" interface=lxc3af106ae46cf k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6cb29660b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3413 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6cb29660b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3413 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b6cb29660b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3413 identity=54870 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6cb29660b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3413 identity=54870 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6cb29660b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3413 identity=54870 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6cb29660b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3413 identity=54870 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.43 7d0a91b3-861b-421c-8ee8-dc6c2953b4f8 default }" containerID=7197f2f6fc8449d84e1384658424872aed5298f1f4ed948dc3498797d15105ef datapathConfiguration="&{false false false false false }" interface=lxcc88646b7c472 k8sPodName=openstack/barbican-api-5ccb6c9d66-2cx2x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7197f2f6fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-api-5ccb6c9d66-2cx2x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7197f2f6fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-api-5ccb6c9d66-2cx2x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7197f2f6fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identity=10914 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-api-5ccb6c9d66-2cx2x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7197f2f6fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identity=10914 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-api-5ccb6c9d66-2cx2x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 75c74663-f250-4a5c-8122-40e967103d6d default }" containerID=f3145f38f7c10d0eb40f499cda3c922e93c30277a87bbde6ad8dac34d9dad263 datapathConfiguration="&{false false false false false }" interface=lxc7e8aa1f2b546 k8sPodName=openstack/barbican-db-init-dddns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3145f38f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-init-dddns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3145f38f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ffde6ccf-25fa-48c1-ba07-0272c1333d3c,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=ffde6ccf-25fa-48c1-ba07-0272c1333d3c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-init-dddns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ffde6ccf-25fa-48c1-ba07-0272c1333d3c;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=ffde6ccf-25fa-48c1-ba07-0272c1333d3c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3145f38f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=19811 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ffde6ccf-25fa-48c1-ba07-0272c1333d3c,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=ffde6ccf-25fa-48c1-ba07-0272c1333d3c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-init-dddns oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3145f38f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=19811 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-init-dddns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7197f2f6fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=484 identity=10914 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-api-5ccb6c9d66-2cx2x subsys=endpoint level=info msg="Successful endpoint creation" containerID=7197f2f6fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=484 identity=10914 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-api-5ccb6c9d66-2cx2x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f3145f38f7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=289 identity=19811 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-init-dddns subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3145f38f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=289 identity=19811 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-init-dddns subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f3145f38f7 endpointID=289 k8sNamespace=openstack k8sPodName=barbican-db-init-dddns subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ffde6ccf-25fa-48c1-ba07-0272c1333d3c k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=ffde6ccf-25fa-48c1-ba07-0272c1333d3c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f3145f38f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=289 identity=19811 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-init-dddns subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 de28450d-4e3e-4815-bfba-d40f5dc3e46d default }" containerID=52d1e195f4b1fdd900a45220550835166ff4590720c26eb6d7a5f751fdc34d98 datapathConfiguration="&{false false false false false }" interface=lxcb4e952b339cd k8sPodName=openstack/barbican-db-sync-6mfq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52d1e195f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-db-sync-6mfq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52d1e195f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=26a68bef-a8a1-400a-a12d-c46d85c73092,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=26a68bef-a8a1-400a-a12d-c46d85c73092,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-db-sync-6mfq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=26a68bef-a8a1-400a-a12d-c46d85c73092;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=26a68bef-a8a1-400a-a12d-c46d85c73092;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52d1e195f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 identity=57695 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=26a68bef-a8a1-400a-a12d-c46d85c73092,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=26a68bef-a8a1-400a-a12d-c46d85c73092,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-db-sync-6mfq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52d1e195f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 identity=57695 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-db-sync-6mfq8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=52d1e195f4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1184 identity=57695 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-db-sync-6mfq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=52d1e195f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1184 identity=57695 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-db-sync-6mfq8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=52d1e195f4 endpointID=1184 k8sNamespace=openstack k8sPodName=barbican-db-sync-6mfq8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=26a68bef-a8a1-400a-a12d-c46d85c73092 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=26a68bef-a8a1-400a-a12d-c46d85c73092 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=52d1e195f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1184 identity=57695 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-db-sync-6mfq8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 1ad8ec06-944a-4153-b2b6-2c0f1e9eda22 default }" containerID=9ebafd269a68df747471426b9923304c4554de808b4d01a3e25ee37aa6e59241 datapathConfiguration="&{false false false false false }" interface=lxc05fc3cc64fae k8sPodName=openstack/barbican-rabbit-init-ms7gf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ebafd269a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3913 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-rabbit-init-ms7gf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ebafd269a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3913 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=793bcf05-c921-47fd-b9a9-056eead6a1c5,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=793bcf05-c921-47fd-b9a9-056eead6a1c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-rabbit-init-ms7gf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=793bcf05-c921-47fd-b9a9-056eead6a1c5;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=793bcf05-c921-47fd-b9a9-056eead6a1c5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ebafd269a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3913 identity=3292 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=793bcf05-c921-47fd-b9a9-056eead6a1c5,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=793bcf05-c921-47fd-b9a9-056eead6a1c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-rabbit-init-ms7gf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ebafd269a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3913 identity=3292 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-rabbit-init-ms7gf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9ebafd269a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3913 identity=3292 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-rabbit-init-ms7gf subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ebafd269a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3913 identity=3292 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-rabbit-init-ms7gf subsys=daemon level=info msg="Delete endpoint request" containerID=9ebafd269a endpointID=3913 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-ms7gf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=793bcf05-c921-47fd-b9a9-056eead6a1c5 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=793bcf05-c921-47fd-b9a9-056eead6a1c5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9ebafd269a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3913 identity=3292 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-rabbit-init-ms7gf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 8159d5b1-14c5-406b-befc-476137c3fe11 default }" containerID=74d7101d810962bbbabfc4495331c927140ba183e4f72ec362a99234a64ae053 datapathConfiguration="&{false false false false false }" interface=lxc4215f89250d5 k8sPodName=openstack/barbican-ks-service-vmc5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74d7101d81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=912 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-service-vmc5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74d7101d81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=912 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ba6113d1-58ab-4dfb-8723-d5ce5b961139,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=ba6113d1-58ab-4dfb-8723-d5ce5b961139,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-service-vmc5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ba6113d1-58ab-4dfb-8723-d5ce5b961139;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=ba6113d1-58ab-4dfb-8723-d5ce5b961139;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74d7101d81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=912 identity=50485 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ba6113d1-58ab-4dfb-8723-d5ce5b961139,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=ba6113d1-58ab-4dfb-8723-d5ce5b961139,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-service-vmc5f oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=74d7101d81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=912 identity=50485 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-service-vmc5f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74d7101d81 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=912 identity=50485 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-service-vmc5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=74d7101d81 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=912 identity=50485 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-service-vmc5f subsys=daemon level=info msg="Delete endpoint request" containerID=74d7101d81 endpointID=912 k8sNamespace=openstack k8sPodName=barbican-ks-service-vmc5f subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ba6113d1-58ab-4dfb-8723-d5ce5b961139 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=ba6113d1-58ab-4dfb-8723-d5ce5b961139 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=74d7101d81 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=912 identity=50485 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-service-vmc5f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 1cf00d93-f9e7-4df7-bd41-62e389a68681 default }" containerID=c6b714053ff01a9f8855cbdd595813609ead0f4ea3d3876987fc275ade1892de datapathConfiguration="&{false false false false false }" interface=lxce3fdf85230af k8sPodName=openstack/barbican-ks-endpoints-2bnq4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6b714053f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1290 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2bnq4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6b714053f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1290 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c582e4db-151d-4ba7-82ce-1d2d80dd8e77,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c582e4db-151d-4ba7-82ce-1d2d80dd8e77,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2bnq4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c582e4db-151d-4ba7-82ce-1d2d80dd8e77;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c582e4db-151d-4ba7-82ce-1d2d80dd8e77;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6b714053f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1290 identity=2032 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c582e4db-151d-4ba7-82ce-1d2d80dd8e77,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c582e4db-151d-4ba7-82ce-1d2d80dd8e77,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2bnq4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6b714053f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1290 identity=2032 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2bnq4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6b714053f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1290 identity=2032 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2bnq4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6b714053f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1290 identity=2032 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2bnq4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c6b714053f endpointID=1290 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-2bnq4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c582e4db-151d-4ba7-82ce-1d2d80dd8e77 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c582e4db-151d-4ba7-82ce-1d2d80dd8e77 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c6b714053f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1290 identity=2032 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2bnq4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 ce4f6ce5-e4a9-4d92-8a8e-c638bc44a078 default }" containerID=99f7bafd2dcbb2405519f59c3f3fdc49498b476abddeb9fd0f9dd4bd4a979276 datapathConfiguration="&{false false false false false }" interface=lxc1f91eff65324 k8sPodName=openstack/barbican-ks-user-pfqbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99f7bafd2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-user-pfqbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99f7bafd2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=669949c1-d6b2-420e-8946-ea69847c80d6,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=669949c1-d6b2-420e-8946-ea69847c80d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-user-pfqbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=669949c1-d6b2-420e-8946-ea69847c80d6;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=669949c1-d6b2-420e-8946-ea69847c80d6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99f7bafd2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 identity=23264 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=669949c1-d6b2-420e-8946-ea69847c80d6,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=669949c1-d6b2-420e-8946-ea69847c80d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-user-pfqbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99f7bafd2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 identity=23264 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-user-pfqbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99f7bafd2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2899 identity=23264 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-user-pfqbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=99f7bafd2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2899 identity=23264 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-user-pfqbb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=99f7bafd2d endpointID=2899 k8sNamespace=openstack k8sPodName=barbican-ks-user-pfqbb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=669949c1-d6b2-420e-8946-ea69847c80d6 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=669949c1-d6b2-420e-8946-ea69847c80d6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=99f7bafd2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2899 identity=23264 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-user-pfqbb subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.17 fb059aaa-c75a-4cb1-a270-cbd120499982 default }" containerID=45de4e6396036c43e9aef60dbbd7b2f17e56a731dfb52ec31014f02743d57eaa datapathConfiguration="&{false false false false false }" interface=lxc974595721242 k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-ztngr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45de4e6396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 ipv4=10.0.0.17 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-ztngr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45de4e6396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.17 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-ztngr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=45de4e6396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-ztngr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45de4e6396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 identity=5973 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.17 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-ztngr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45de4e6396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 identity=5973 ipv4=10.0.0.17 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-ztngr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45de4e6396 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2121 identity=5973 ipv4=10.0.0.17 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-ztngr subsys=endpoint level=info msg="Successful endpoint creation" containerID=45de4e6396 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2121 identity=5973 ipv4=10.0.0.17 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-ztngr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.04159846875972243 newInterval=16m53s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.107 3daef74e-3e0b-4c27-a69a-9e0c33d57d40 default }" containerID=b4c0f21d8aad94ca9e06ffdaaaae26e5aa3f603114ed476058a6431ca5a57778 datapathConfiguration="&{false false false false false }" interface=lxca31913fe75b3 k8sPodName=openstack/rook-ceph-detect-version-tjcpr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4c0f21d8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tjcpr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4c0f21d8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=3603d448-16e8-4d05-9eba-a96d0da60c96,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=3603d448-16e8-4d05-9eba-a96d0da60c96,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tjcpr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=3603d448-16e8-4d05-9eba-a96d0da60c96;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=3603d448-16e8-4d05-9eba-a96d0da60c96;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b4c0f21d8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identity=9895 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=3603d448-16e8-4d05-9eba-a96d0da60c96,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=3603d448-16e8-4d05-9eba-a96d0da60c96,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tjcpr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4c0f21d8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identity=9895 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tjcpr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4c0f21d8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=234 identity=9895 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tjcpr subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4c0f21d8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=234 identity=9895 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tjcpr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4c0f21d8a endpointID=234 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-tjcpr subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=3603d448-16e8-4d05-9eba-a96d0da60c96 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=3603d448-16e8-4d05-9eba-a96d0da60c96 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=b4c0f21d8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=234 identity=9895 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tjcpr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 3f55f065-416e-45c3-9f1f-e7ec6402627b default }" containerID=a11b3c983718dcf9e081f7ce4f360240d8e623e7ea94d46ff7ba08f1fe9ede8b datapathConfiguration="&{false false false false false }" interface=lxc354dae37e415 k8sPodName=openstack/ceph-object-controller-detect-version-zrdn6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a11b3c9837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zrdn6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a11b3c9837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=092c6cf8-b224-4e4b-8872-f89ee8d12e89,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=092c6cf8-b224-4e4b-8872-f89ee8d12e89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zrdn6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=092c6cf8-b224-4e4b-8872-f89ee8d12e89;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=092c6cf8-b224-4e4b-8872-f89ee8d12e89;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a11b3c9837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=609 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=092c6cf8-b224-4e4b-8872-f89ee8d12e89,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=092c6cf8-b224-4e4b-8872-f89ee8d12e89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zrdn6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a11b3c9837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=609 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zrdn6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a11b3c9837 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=155 identity=609 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zrdn6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a11b3c9837 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=609 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zrdn6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.117 08ef6e5f-b745-4027-80bd-56d8384fcec1 default }" containerID=ed4e564779063ca842c5e72e37a71be2cfa5860aaccbff5fb81cea5e14903e16 datapathConfiguration="&{false false false false false }" interface=lxc0dfd798e1734 k8sPodName=local-path-storage/helper-pod-create-pvc-15b2be7c-7968-4d5b-bbfe-4a52f7e01f38 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed4e564779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=172 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15b2be7c-7968-4d5b-bbfe-4a52f7e01f38 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed4e564779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=172 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15b2be7c-7968-4d5b-bbfe-4a52f7e01f38 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed4e564779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=172 identity=25619 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15b2be7c-7968-4d5b-bbfe-4a52f7e01f38 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed4e564779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=172 identity=25619 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15b2be7c-7968-4d5b-bbfe-4a52f7e01f38 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed4e564779 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=172 identity=25619 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15b2be7c-7968-4d5b-bbfe-4a52f7e01f38 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed4e564779 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=172 identity=25619 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15b2be7c-7968-4d5b-bbfe-4a52f7e01f38 subsys=daemon level=info msg="Delete endpoint request" containerID=a11b3c9837 endpointID=155 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-zrdn6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=092c6cf8-b224-4e4b-8872-f89ee8d12e89 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=092c6cf8-b224-4e4b-8872-f89ee8d12e89 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=a11b3c9837 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=609 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zrdn6 subsys=endpoint level=info msg="Delete endpoint request" containerID=ed4e564779 endpointID=172 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-15b2be7c-7968-4d5b-bbfe-4a52f7e01f38 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ed4e564779 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=172 identity=25619 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15b2be7c-7968-4d5b-bbfe-4a52f7e01f38 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 ff3a9058-6b9a-4563-a0a0-e937474ff3d4 default }" containerID=0bae8bbb56c335a3abdb637650f6b41e6bd85352e4d71bd14bcc3bf6d1ba298d datapathConfiguration="&{false false false false false }" interface=lxcb97b98378d12 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bae8bbb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bae8bbb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0bae8bbb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0bae8bbb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=46483 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bae8bbb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=46483 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0bae8bbb56 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1068 identity=46483 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bae8bbb56 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1068 identity=46483 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.141 10679dab-cc31-45fb-b814-9028b0d8fd25 default }" containerID=d0a2fdc37ec3e75fc5fda15a672c71ccfc415c8610695fa34ae3078120c94acd datapathConfiguration="&{false false false false false }" interface=lxc70e1316caa47 k8sPodName=openstack/glance-db-init-phnlq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0a2fdc37e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-db-init-phnlq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0a2fdc37e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e6d79372-6e42-4b62-bb3e-d99221d3d8b5,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=e6d79372-6e42-4b62-bb3e-d99221d3d8b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-db-init-phnlq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e6d79372-6e42-4b62-bb3e-d99221d3d8b5;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=e6d79372-6e42-4b62-bb3e-d99221d3d8b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d0a2fdc37e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-db-init-phnlq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d0a2fdc37e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 identity=33502 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e6d79372-6e42-4b62-bb3e-d99221d3d8b5,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=e6d79372-6e42-4b62-bb3e-d99221d3d8b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-db-init-phnlq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0a2fdc37e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 identity=33502 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-db-init-phnlq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0a2fdc37e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1580 identity=33502 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-db-init-phnlq subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0a2fdc37e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1580 identity=33502 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-db-init-phnlq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d0a2fdc37e endpointID=1580 k8sNamespace=openstack k8sPodName=glance-db-init-phnlq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e6d79372-6e42-4b62-bb3e-d99221d3d8b5 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=e6d79372-6e42-4b62-bb3e-d99221d3d8b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d0a2fdc37e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1580 identity=33502 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-db-init-phnlq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 8773c60b-d902-4340-8c15-e4137878309f default }" containerID=0b8a9315ac6b318f2dd85303d774cc3893c373e932da6b5cd2c1d110db09b950 datapathConfiguration="&{false false false false false }" interface=lxc304224435c6a k8sPodName=openstack/glance-db-sync-k2kzf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b8a9315ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4047 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-sync-k2kzf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b8a9315ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4047 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bf0ab514-03b3-4f26-a927-839847bb9050,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=bf0ab514-03b3-4f26-a927-839847bb9050,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-sync-k2kzf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bf0ab514-03b3-4f26-a927-839847bb9050;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=bf0ab514-03b3-4f26-a927-839847bb9050;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b8a9315ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4047 identity=11923 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bf0ab514-03b3-4f26-a927-839847bb9050,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=bf0ab514-03b3-4f26-a927-839847bb9050,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-sync-k2kzf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b8a9315ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4047 identity=11923 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-sync-k2kzf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0b8a9315ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4047 identity=11923 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-sync-k2kzf subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b8a9315ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4047 identity=11923 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-sync-k2kzf subsys=daemon level=info msg="Delete endpoint request" containerID=0b8a9315ac endpointID=4047 k8sNamespace=openstack k8sPodName=glance-db-sync-k2kzf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bf0ab514-03b3-4f26-a927-839847bb9050 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=bf0ab514-03b3-4f26-a927-839847bb9050 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0b8a9315ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4047 identity=11923 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-sync-k2kzf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 bab954ec-e75f-422c-8621-3f8f6e69eb64 default }" containerID=73b70839e35f526395405dc0ea1d7db0d87639a8338e6f7665c5b1341a0b9461 datapathConfiguration="&{false false false false false }" interface=lxc71498c71928a k8sPodName=openstack/glance-rabbit-init-25cxv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73b70839e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1415 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-rabbit-init-25cxv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73b70839e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1415 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=429c9a82-4717-46ba-b2c9-212748d294d8,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=429c9a82-4717-46ba-b2c9-212748d294d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-rabbit-init-25cxv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=429c9a82-4717-46ba-b2c9-212748d294d8;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=429c9a82-4717-46ba-b2c9-212748d294d8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73b70839e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1415 identity=54579 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=429c9a82-4717-46ba-b2c9-212748d294d8,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=429c9a82-4717-46ba-b2c9-212748d294d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-rabbit-init-25cxv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73b70839e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1415 identity=54579 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-rabbit-init-25cxv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73b70839e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1415 identity=54579 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-rabbit-init-25cxv subsys=endpoint level=info msg="Successful endpoint creation" containerID=73b70839e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1415 identity=54579 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-rabbit-init-25cxv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=73b70839e3 endpointID=1415 k8sNamespace=openstack k8sPodName=glance-rabbit-init-25cxv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=429c9a82-4717-46ba-b2c9-212748d294d8 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=429c9a82-4717-46ba-b2c9-212748d294d8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=73b70839e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1415 identity=54579 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-rabbit-init-25cxv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 7d08bfab-354f-4a09-a2cb-eedd98890008 default }" containerID=7a91901cf12fc373dedf3cfdbddb803afedf9a949b9e1ca0db9605890a8a3cb4 datapathConfiguration="&{false false false false false }" interface=lxc8b82707a5b43 k8sPodName=openstack/glance-ks-service-6gql6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a91901cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3978 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-ks-service-6gql6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a91901cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3978 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=34bf3af4-ef20-4c98-bf63-dc0f599cb224,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=34bf3af4-ef20-4c98-bf63-dc0f599cb224,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-ks-service-6gql6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7a91901cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3978 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-ks-service-6gql6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=34bf3af4-ef20-4c98-bf63-dc0f599cb224;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=34bf3af4-ef20-4c98-bf63-dc0f599cb224;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a91901cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3978 identity=23569 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=34bf3af4-ef20-4c98-bf63-dc0f599cb224,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=34bf3af4-ef20-4c98-bf63-dc0f599cb224,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-ks-service-6gql6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a91901cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3978 identity=23569 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-ks-service-6gql6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a91901cf1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3978 identity=23569 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-ks-service-6gql6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a91901cf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3978 identity=23569 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-ks-service-6gql6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.52 3d0c09b2-bde6-40c8-847c-73168e79eaf2 default }" containerID=260d74df8470903d0f7a4ef7ac60ff35b4ad2572ed175c4bdef4af569cabe04c datapathConfiguration="&{false false false false false }" interface=lxcd14db5fe430e k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-56lhr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=260d74df84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-56lhr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=260d74df84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-56lhr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=260d74df84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=63685 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-56lhr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=260d74df84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=63685 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-56lhr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.85 381ce1d1-7af1-4b12-9ff6-44e22ddbb63b default }" containerID=a38dce19982c1ca3270df4737a2365e402cb68bbc24de0523352b29fcee015d2 datapathConfiguration="&{false false false false false }" interface=lxcca9e8e8503c4 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f5pkl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a38dce1998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4052 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f5pkl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a38dce1998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4052 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f5pkl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a38dce1998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4052 identity=47949 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f5pkl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a38dce1998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4052 identity=47949 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f5pkl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=260d74df84 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=131 identity=63685 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-56lhr subsys=endpoint level=info msg="Successful endpoint creation" containerID=260d74df84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=131 identity=63685 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-56lhr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a38dce1998 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4052 identity=47949 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f5pkl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a38dce1998 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4052 identity=47949 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f5pkl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a91901cf1 endpointID=3978 k8sNamespace=openstack k8sPodName=glance-ks-service-6gql6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=34bf3af4-ef20-4c98-bf63-dc0f599cb224 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=34bf3af4-ef20-4c98-bf63-dc0f599cb224 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7a91901cf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3978 identity=23569 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-ks-service-6gql6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 d9212633-e352-4890-9cdd-e0d127127c1e default }" containerID=9dd9030ff801ef4e08a629549ce809dba110d7e43031f1269f5c6849010179d7 datapathConfiguration="&{false false false false false }" interface=lxc3e4c134ffcdc k8sPodName=openstack/glance-ks-endpoints-56v5q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9dd9030ff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-56v5q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9dd9030ff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e172e140-905f-416e-b2cd-c74748a70522,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e172e140-905f-416e-b2cd-c74748a70522,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-56v5q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e172e140-905f-416e-b2cd-c74748a70522;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=e172e140-905f-416e-b2cd-c74748a70522;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9dd9030ff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identity=9688 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e172e140-905f-416e-b2cd-c74748a70522,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e172e140-905f-416e-b2cd-c74748a70522,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-56v5q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9dd9030ff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identity=9688 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-56v5q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9dd9030ff8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=115 identity=9688 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-56v5q subsys=endpoint level=info msg="Successful endpoint creation" containerID=9dd9030ff8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=115 identity=9688 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-56v5q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9dd9030ff8 endpointID=115 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-56v5q subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e172e140-905f-416e-b2cd-c74748a70522 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=e172e140-905f-416e-b2cd-c74748a70522 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9dd9030ff8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=115 identity=9688 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-56v5q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 72c74eef-1c45-4fef-9782-ae94bdd2ae25 default }" containerID=d65d8ae94777240e066c378dac70a6a3a964a6d497db94efe211f1d7062b011e datapathConfiguration="&{false false false false false }" interface=lxc2d268bc72098 k8sPodName=openstack/ceph-object-controller-detect-version-kp9cn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d65d8ae947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kp9cn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d65d8ae947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=4866481a-a664-47b0-8be0-5cc64e959654,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=4866481a-a664-47b0-8be0-5cc64e959654,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kp9cn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=4866481a-a664-47b0-8be0-5cc64e959654;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=4866481a-a664-47b0-8be0-5cc64e959654;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d65d8ae947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 identity=13127 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=4866481a-a664-47b0-8be0-5cc64e959654,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=4866481a-a664-47b0-8be0-5cc64e959654,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kp9cn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d65d8ae947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 identity=13127 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kp9cn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d65d8ae947 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3026 identity=13127 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kp9cn subsys=endpoint level=info msg="Successful endpoint creation" containerID=d65d8ae947 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3026 identity=13127 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kp9cn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.16 8dba2925-3aaa-42fd-b83e-f5077fd899df default }" containerID=275e4d38b370c3aa1ed415d34ad9c8504993448e51f8c2bc25e306cb9f4d982d datapathConfiguration="&{false false false false false }" interface=lxce15dae73e237 k8sPodName=openstack/glance-ks-user-tsjql labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=275e4d38b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-tsjql subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=275e4d38b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eb900965-11fe-4a73-9075-296a3965ce2b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=eb900965-11fe-4a73-9075-296a3965ce2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-tsjql subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=eb900965-11fe-4a73-9075-296a3965ce2b;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=eb900965-11fe-4a73-9075-296a3965ce2b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=275e4d38b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=18017 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eb900965-11fe-4a73-9075-296a3965ce2b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=eb900965-11fe-4a73-9075-296a3965ce2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-tsjql oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=275e4d38b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=18017 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-tsjql subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=275e4d38b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1038 identity=18017 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-tsjql subsys=endpoint level=info msg="Successful endpoint creation" containerID=275e4d38b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1038 identity=18017 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-tsjql subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d65d8ae947 endpointID=3026 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-kp9cn subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=4866481a-a664-47b0-8be0-5cc64e959654 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=4866481a-a664-47b0-8be0-5cc64e959654 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=d65d8ae947 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3026 identity=13127 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kp9cn subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=275e4d38b3 endpointID=1038 k8sNamespace=openstack k8sPodName=glance-ks-user-tsjql subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=eb900965-11fe-4a73-9075-296a3965ce2b k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=eb900965-11fe-4a73-9075-296a3965ce2b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=275e4d38b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1038 identity=18017 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-tsjql subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 9d8118b2-aecc-408f-bb69-1e3a47df84f8 default }" containerID=15905ff351800291b16372514982484c4461e80caa8b22182e68bdb9b1ac17ce datapathConfiguration="&{false false false false false }" interface=lxce3d1016b2069 k8sPodName=openstack/glance-metadefs-load-88xg4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15905ff351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-metadefs-load-88xg4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15905ff351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=90260d47-b67a-4f69-915f-b1d34b5e4722,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=90260d47-b67a-4f69-915f-b1d34b5e4722,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-metadefs-load-88xg4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=15905ff351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-metadefs-load-88xg4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=90260d47-b67a-4f69-915f-b1d34b5e4722;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=90260d47-b67a-4f69-915f-b1d34b5e4722;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15905ff351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identity=27900 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=90260d47-b67a-4f69-915f-b1d34b5e4722,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=90260d47-b67a-4f69-915f-b1d34b5e4722,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-metadefs-load-88xg4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15905ff351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identity=27900 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-metadefs-load-88xg4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15905ff351 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=559 identity=27900 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-metadefs-load-88xg4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=15905ff351 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=559 identity=27900 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-metadefs-load-88xg4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15905ff351 endpointID=559 k8sNamespace=openstack k8sPodName=glance-metadefs-load-88xg4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=90260d47-b67a-4f69-915f-b1d34b5e4722 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=90260d47-b67a-4f69-915f-b1d34b5e4722 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=15905ff351 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=559 identity=27900 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-metadefs-load-88xg4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 9d287968-0fc6-473f-9e1b-985ab04e8f35 default }" containerID=7c3478a5b5e41076e4ca8174613c0c0a42174aa33d609db8342f3026ebaa950e datapathConfiguration="&{false false false false false }" interface=lxc4c30dea27316 k8sPodName=openstack/glance-storage-init-4tvp8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c3478a5b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3045 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-storage-init-4tvp8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c3478a5b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3045 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4a1b0cfa-7327-4b6d-8c34-57e5c118b2c9,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=4a1b0cfa-7327-4b6d-8c34-57e5c118b2c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-storage-init-4tvp8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4a1b0cfa-7327-4b6d-8c34-57e5c118b2c9;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=4a1b0cfa-7327-4b6d-8c34-57e5c118b2c9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c3478a5b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3045 identity=5573 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4a1b0cfa-7327-4b6d-8c34-57e5c118b2c9,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=4a1b0cfa-7327-4b6d-8c34-57e5c118b2c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-storage-init-4tvp8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c3478a5b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3045 identity=5573 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-storage-init-4tvp8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c3478a5b5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3045 identity=5573 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-storage-init-4tvp8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c3478a5b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3045 identity=5573 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-storage-init-4tvp8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7c3478a5b5 endpointID=3045 k8sNamespace=openstack k8sPodName=glance-storage-init-4tvp8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4a1b0cfa-7327-4b6d-8c34-57e5c118b2c9 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=4a1b0cfa-7327-4b6d-8c34-57e5c118b2c9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7c3478a5b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3045 identity=5573 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-storage-init-4tvp8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 82734074-3484-47b6-967a-ea5fdb0adf26 default }" containerID=6b67970b2450b611772e4918f78a67cd9378a59ac4254956352ddd0894d43911 datapathConfiguration="&{false false false false false }" interface=lxc201174c272da k8sPodName=openstack/glance-api-8547b58f58-cm6xf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b67970b24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1891 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-8547b58f58-cm6xf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b67970b24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1891 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-8547b58f58-cm6xf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6b67970b24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1891 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-8547b58f58-cm6xf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b67970b24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1891 identity=48760 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-8547b58f58-cm6xf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b67970b24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1891 identity=48760 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-8547b58f58-cm6xf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b67970b24 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1891 identity=48760 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-8547b58f58-cm6xf subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b67970b24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1891 identity=48760 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-8547b58f58-cm6xf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 a92a80b1-6b8c-437f-8f82-32472b9d09cf default }" containerID=85b286d4096676f00e7d4c2f4af3a53bfd7c9be0b85a040d29a327b397779700 datapathConfiguration="&{false false false false false }" interface=lxc4d98b48a42ac k8sPodName=openstack/staffeln-db-init-dv4nk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85b286d409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2541 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-dv4nk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85b286d409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2541 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ca9fb300-b884-4f64-9a86-aaa582f576f7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=ca9fb300-b884-4f64-9a86-aaa582f576f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-dv4nk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=85b286d409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2541 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-dv4nk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=ca9fb300-b884-4f64-9a86-aaa582f576f7;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=ca9fb300-b884-4f64-9a86-aaa582f576f7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85b286d409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2541 identity=24132 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ca9fb300-b884-4f64-9a86-aaa582f576f7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=ca9fb300-b884-4f64-9a86-aaa582f576f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-dv4nk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85b286d409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2541 identity=24132 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-dv4nk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85b286d409 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2541 identity=24132 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-dv4nk subsys=endpoint level=info msg="Successful endpoint creation" containerID=85b286d409 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2541 identity=24132 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-dv4nk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.183 d447ea9c-da34-4dde-a8c2-95a71edc1f2b default }" containerID=7920e12f69ee5eb464995d8bbe9f4bd67318141c7bccec64a6cdcd78b2062a21 datapathConfiguration="&{false false false false false }" interface=lxc46f9be73f00a k8sPodName=openstack/staffeln-api-5b59b567fb-7c92x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7920e12f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1385 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/staffeln-api-5b59b567fb-7c92x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7920e12f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1385 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/staffeln-api-5b59b567fb-7c92x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7920e12f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1385 identity=24744 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/staffeln-api-5b59b567fb-7c92x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7920e12f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1385 identity=24744 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/staffeln-api-5b59b567fb-7c92x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 f3366583-f8ab-4f7f-a049-17e7136af821 default }" containerID=bae42ca7733dc2221142d5415575304b8bbf2e2a99524efc6a995104ef6574ff datapathConfiguration="&{false false false false false }" interface=lxc52b49a453e7b k8sPodName=openstack/staffeln-conductor-557db4b66c-5mtgp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bae42ca773 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3689 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-conductor-557db4b66c-5mtgp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bae42ca773 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3689 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-conductor-557db4b66c-5mtgp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bae42ca773 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3689 identity=29671 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-conductor-557db4b66c-5mtgp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bae42ca773 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3689 identity=29671 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-conductor-557db4b66c-5mtgp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7920e12f69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1385 identity=24744 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/staffeln-api-5b59b567fb-7c92x subsys=endpoint level=info msg="Successful endpoint creation" containerID=7920e12f69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1385 identity=24744 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/staffeln-api-5b59b567fb-7c92x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bae42ca773 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3689 identity=29671 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-conductor-557db4b66c-5mtgp subsys=endpoint level=info msg="Successful endpoint creation" containerID=bae42ca773 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3689 identity=29671 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-conductor-557db4b66c-5mtgp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=85b286d409 endpointID=2541 k8sNamespace=openstack k8sPodName=staffeln-db-init-dv4nk subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=ca9fb300-b884-4f64-9a86-aaa582f576f7 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=ca9fb300-b884-4f64-9a86-aaa582f576f7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=85b286d409 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2541 identity=24132 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-dv4nk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 7c5100bc-2b9f-4667-82fd-05f14740aa35 default }" containerID=fb0d215458407fc4881fc23fde9ce7dd737b550a8e0d1eeb2526abbbf443c42a datapathConfiguration="&{false false false false false }" interface=lxc677db514b71c k8sPodName=openstack/staffeln-db-sync-dnqd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb0d215458 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1627 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-db-sync-dnqd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb0d215458 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1627 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=45de3b73-7ff5-426d-b11a-f0ed019c4dee,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=45de3b73-7ff5-426d-b11a-f0ed019c4dee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-db-sync-dnqd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=45de3b73-7ff5-426d-b11a-f0ed019c4dee;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=45de3b73-7ff5-426d-b11a-f0ed019c4dee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb0d215458 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1627 identity=10583 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=45de3b73-7ff5-426d-b11a-f0ed019c4dee,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=45de3b73-7ff5-426d-b11a-f0ed019c4dee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-db-sync-dnqd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb0d215458 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1627 identity=10583 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-db-sync-dnqd2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb0d215458 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1627 identity=10583 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-db-sync-dnqd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb0d215458 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1627 identity=10583 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-db-sync-dnqd2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager