level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="723.953µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="39.762µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="801.085µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.2µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=94.993618ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="9.65µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="45.201µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="70.562µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="53.811µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="81.323µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="425.384µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.52µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.172856ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.047085ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="36.521µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="39.281µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="226.757µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="104.273µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="82.693µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=56.095316ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="75.522µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.321µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.44µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.115.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.261612ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="15.561µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.551262ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.741µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.519291ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.431µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.66µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="12.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="28.63µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="12.101µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="71.982µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="353.871µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.31µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="220.677µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="923.41µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.26734ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.1µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="24.261µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.115 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.115 ipAddr.ipv6="" k8sNodeIP=199.204.45.115 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.115" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.251" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.115" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.115} {CiliumInternalIP 10.0.0.251}] 10.0.0.0/24 [] [] 10.0.0.63 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:39387" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.424118399s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="24.131µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.35µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="39.811µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="3.16µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.567645358s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=307.661785ms file-path=/var/run/cilium/state/templates/829401383f1ccc383d8658195e9f51c78afdfb4c26cb7f068abaa76f4e12a88c/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=238 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 9e5d4e9e-979f-44e2-b5be-c17bfa92e42e default }" containerID=55b2a12cc619fe1ebc0b34b7c532586b044b6454c5ffa690730a663fc74c3761 datapathConfiguration="&{false false false false false }" interface=lxcc785d823477a k8sPodName=kube-system/coredns-7c96b6546b-b2kfc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55b2a12cc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-b2kfc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55b2a12cc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-b2kfc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.116 9d0d059a-f1fb-48cc-9c09-19b11d40df4f default }" containerID=273e0e01b83468d0056eda125b7605847f04f878781f2f2266c6f7f64d557415 datapathConfiguration="&{false false false false false }" interface=lxc72bb90546f0e k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5lp8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=273e0e01b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5lp8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=273e0e01b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=708cb7c6-c6f4-490c-af55-29e599cd882a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=708cb7c6-c6f4-490c-af55-29e599cd882a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5lp8 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=273e0e01b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5lp8 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=55b2a12cc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-b2kfc line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=55b2a12cc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identity=24905 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-b2kfc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55b2a12cc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identity=24905 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-b2kfc subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=708cb7c6-c6f4-490c-af55-29e599cd882a;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=708cb7c6-c6f4-490c-af55-29e599cd882a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=273e0e01b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identity=57583 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=708cb7c6-c6f4-490c-af55-29e599cd882a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=708cb7c6-c6f4-490c-af55-29e599cd882a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5lp8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=273e0e01b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identity=57583 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5lp8 subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2100 ipv4=10.0.0.63 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2100 identityLabels="reserved:health" ipv4=10.0.0.63 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2100 identity=4 identityLabels="reserved:health" ipv4=10.0.0.63 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.077964983s file-path=/var/run/cilium/state/templates/7efc9854f22b82ef1ea1022fecf7d63e53c881312f0528a9f56e1291b44d68d6/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=55b2a12cc6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=178 identity=24905 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-b2kfc subsys=endpoint level=info msg="Successful endpoint creation" containerID=55b2a12cc6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=178 identity=24905 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-b2kfc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=273e0e01b8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=302 identity=57583 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5lp8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=273e0e01b8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=302 identity=57583 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5lp8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2100 identity=4 ipv4=10.0.0.63 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=273e0e01b8 endpointID=302 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-x5lp8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=708cb7c6-c6f4-490c-af55-29e599cd882a k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=708cb7c6-c6f4-490c-af55-29e599cd882a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=273e0e01b8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=302 identity=57583 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5lp8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 4e30c815-1467-45bd-b3bd-bbfb1767a92b default }" containerID=e3328176830da0aa609137a9a29372c6a1675fc39762d56f46ce08f26f517c6c datapathConfiguration="&{false false false false false }" interface=lxc69c478508a39 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kqvfq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e332817683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 ipv4=10.0.0.189 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kqvfq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e332817683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.189 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kqvfq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e332817683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.189 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kqvfq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e332817683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 identity=39380 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.189 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kqvfq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e332817683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 identity=39380 ipv4=10.0.0.189 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kqvfq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e332817683 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1061 identity=39380 ipv4=10.0.0.189 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kqvfq subsys=endpoint level=info msg="Successful endpoint creation" containerID=e332817683 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1061 identity=39380 ipv4=10.0.0.189 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kqvfq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=238 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00238 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00238 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00238 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00238:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=238 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 e3b8f0ce-809a-4d51-9af6-a776c9275bb7 default }" containerID=dc7b2e5c90f9bb994c6dec39667331350c984290dd3179e62e81a66e58c63bb4 datapathConfiguration="&{false false false false false }" interface=lxce4fc8cc454a0 k8sPodName=kube-system/coredns-67659f764b-jl2vr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc7b2e5c90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-67659f764b-jl2vr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc7b2e5c90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-67659f764b-jl2vr subsys=endpoint level=info msg="Identity of endpoint changed" containerID=dc7b2e5c90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identity=24905 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-67659f764b-jl2vr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc7b2e5c90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identity=24905 ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-67659f764b-jl2vr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc7b2e5c90 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1049 identity=24905 ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-67659f764b-jl2vr subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc7b2e5c90 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1049 identity=24905 ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-67659f764b-jl2vr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 b27dd538-2994-4713-9a5e-a0c5f43f7c43 default }" containerID=3b6bddd47e5b301904923937744b323d599e404e3b845ad64a9b2d6a1688a1f4 datapathConfiguration="&{false false false false false }" interface=lxc4d7832e81b20 k8sPodName=kube-system/coredns-67659f764b-zg795 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b6bddd47e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3230 ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-67659f764b-zg795 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b6bddd47e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3230 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-67659f764b-zg795 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3b6bddd47e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3230 identity=24905 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-67659f764b-zg795 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b6bddd47e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3230 identity=24905 ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-67659f764b-zg795 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b6bddd47e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3230 identity=24905 ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-67659f764b-zg795 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b6bddd47e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3230 identity=24905 ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-67659f764b-zg795 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.123 782d9e98-f651-4fc9-a6a2-a3989deacfbb default }" containerID=d16e9a54c12559adb9f890a099e8ae14b97c0073889a1d6b91baab60240344c9 datapathConfiguration="&{false false false false false }" interface=lxcfe702da6e837 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hgkxz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d16e9a54c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3693 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hgkxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d16e9a54c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3693 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hgkxz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d16e9a54c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3693 identity=42653 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hgkxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d16e9a54c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3693 identity=42653 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hgkxz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d16e9a54c1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3693 identity=42653 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hgkxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d16e9a54c1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3693 identity=42653 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hgkxz subsys=daemon level=info msg="Delete endpoint request" containerID=55b2a12cc6 endpointID=178 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-b2kfc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=55b2a12cc6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=178 identity=24905 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-b2kfc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 8d9224f7-5479-4f7d-a2d0-f6761b5197f3 default }" containerID=ce28cc91b2dc08a199de2899807a729bf6229821af45eccaf1e66c51535a1e43 datapathConfiguration="&{false false false false false }" interface=lxca64ee8c984db k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-rk6rg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce28cc91b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1243 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-rk6rg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 0c65ec4e-ced3-4913-b471-9434ae7a7a87 default }" containerID=8c7115eb8e57f6fe588e170b7c3fe1022a206083d8fc5718e43c43b5ee18691c datapathConfiguration="&{false false false false false }" interface=lxcd28ed20e5773 k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-tblms labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=ce28cc91b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1243 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-rk6rg subsys=endpoint level=info msg="New endpoint" containerID=8c7115eb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-tblms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=8c7115eb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-tblms subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce28cc91b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1243 identity=5284 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-rk6rg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce28cc91b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1243 identity=5284 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-rk6rg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8c7115eb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-tblms line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce28cc91b2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1243 identity=5284 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-rk6rg subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce28cc91b2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1243 identity=5284 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-rk6rg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.155 47d48947-1f3f-4a2e-af11-b1b620109728 default }" containerID=61f83419e04d3acb4a34368a92bd8855ecd7d94c4b0e301ab898ce09988c1d1c datapathConfiguration="&{false false false false false }" interface=lxcf0d6da425179 k8sPodName=cert-manager/cert-manager-75969b45cf-xbl5j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61f83419e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1423 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-xbl5j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61f83419e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1423 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-xbl5j subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c7115eb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identity=12483 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-tblms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c7115eb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identity=12483 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-tblms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61f83419e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1423 identity=8442 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-xbl5j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61f83419e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1423 identity=8442 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-xbl5j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c7115eb8e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2655 identity=12483 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-tblms subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c7115eb8e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2655 identity=12483 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-tblms subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=61f83419e0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1423 identity=8442 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-xbl5j subsys=endpoint level=info msg="Successful endpoint creation" containerID=61f83419e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1423 identity=8442 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-xbl5j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.26 51d27c32-de73-429b-9752-a5df2633174b default }" containerID=d33892079f73a40523987171f48e0631717c5b924bcca41726c69e7fbea86d6a datapathConfiguration="&{false false false false false }" interface=lxc48fc30c2e320 k8sPodName=cert-manager/cert-manager-startupapicheck-p9xh5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d33892079f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p9xh5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d33892079f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=38c35adf-e9d6-4df6-b50f-a3a24888e178,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=38c35adf-e9d6-4df6-b50f-a3a24888e178,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p9xh5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=38c35adf-e9d6-4df6-b50f-a3a24888e178;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=38c35adf-e9d6-4df6-b50f-a3a24888e178;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d33892079f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identity=26141 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=38c35adf-e9d6-4df6-b50f-a3a24888e178,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=38c35adf-e9d6-4df6-b50f-a3a24888e178,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p9xh5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d33892079f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identity=26141 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p9xh5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d33892079f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=105 identity=26141 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p9xh5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d33892079f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=105 identity=26141 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p9xh5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d33892079f endpointID=105 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-p9xh5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=38c35adf-e9d6-4df6-b50f-a3a24888e178 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=38c35adf-e9d6-4df6-b50f-a3a24888e178 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=d33892079f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=105 identity=26141 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-p9xh5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 5a9d5142-e22d-4d64-bbd5-6e3609a89626 default }" containerID=a282d1e201f3d9399c245d7fe313d4d7f938a081ec31913759a9895df99c4baa datapathConfiguration="&{false false false false false }" interface=lxc010a0d966207 k8sPodName=ingress-nginx/ingress-nginx-admission-create-kmwmj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a282d1e201 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1215 ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kmwmj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a282d1e201 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1215 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=62b9cd6e-ea7b-4b4a-8d32-a0b88a4d4e27,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=62b9cd6e-ea7b-4b4a-8d32-a0b88a4d4e27,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kmwmj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=62b9cd6e-ea7b-4b4a-8d32-a0b88a4d4e27;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=62b9cd6e-ea7b-4b4a-8d32-a0b88a4d4e27;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a282d1e201 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1215 identity=4442 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=62b9cd6e-ea7b-4b4a-8d32-a0b88a4d4e27,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=62b9cd6e-ea7b-4b4a-8d32-a0b88a4d4e27,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kmwmj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a282d1e201 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1215 identity=4442 ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kmwmj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a282d1e201 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1215 identity=4442 ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kmwmj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a282d1e201 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1215 identity=4442 ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kmwmj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a282d1e201 endpointID=1215 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-kmwmj subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=62b9cd6e-ea7b-4b4a-8d32-a0b88a4d4e27 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=62b9cd6e-ea7b-4b4a-8d32-a0b88a4d4e27 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=a282d1e201 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1215 identity=4442 ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kmwmj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 b9fa4508-8e2b-41b9-8600-fa84b90db7f2 default }" containerID=8f3a219e35a73f5f9673c4e51d920a0517e7bb94f8b4e954a00b9a285b70aa02 datapathConfiguration="&{false false false false false }" interface=lxcc0e235f38061 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qmdz5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f3a219e35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qmdz5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f3a219e35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qmdz5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8f3a219e35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qmdz5 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8f3a219e35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identity=28049 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qmdz5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f3a219e35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identity=28049 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qmdz5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f3a219e35 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=863 identity=28049 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qmdz5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f3a219e35 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=863 identity=28049 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qmdz5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 f9025b27-966a-42de-b733-a763b54e2744 default }" containerID=7115c7bd334ead2d6f2601d393b1e0362dc959b6b9754f41341bc17578844675 datapathConfiguration="&{false false false false false }" interface=lxc30286f5e9c71 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hz4zr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7115c7bd33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 ipv4=10.0.0.197 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hz4zr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7115c7bd33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d7511030-5257-4ce5-8178-409c65e33dc8,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=d7511030-5257-4ce5-8178-409c65e33dc8,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.197 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hz4zr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=d7511030-5257-4ce5-8178-409c65e33dc8;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=d7511030-5257-4ce5-8178-409c65e33dc8;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7115c7bd33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=38136 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d7511030-5257-4ce5-8178-409c65e33dc8,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=d7511030-5257-4ce5-8178-409c65e33dc8,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.197 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hz4zr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7115c7bd33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=38136 ipv4=10.0.0.197 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hz4zr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7115c7bd33 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1341 identity=38136 ipv4=10.0.0.197 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hz4zr subsys=endpoint level=info msg="Successful endpoint creation" containerID=7115c7bd33 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1341 identity=38136 ipv4=10.0.0.197 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hz4zr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7115c7bd33 endpointID=1341 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-hz4zr subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=d7511030-5257-4ce5-8178-409c65e33dc8 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=d7511030-5257-4ce5-8178-409c65e33dc8 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=7115c7bd33 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1341 identity=38136 ipv4=10.0.0.197 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hz4zr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 f813c4a4-4082-4556-8087-ae2cbba4edc1 default }" containerID=bf37ba8e552cdc856fedf1c393b1aa5492332a1fb07423b2d7a818cd722d09e3 datapathConfiguration="&{false false false false false }" interface=lxcb7730cbd9080 k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-kmtj8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf37ba8e55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-kmtj8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf37ba8e55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-kmtj8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf37ba8e55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identity=4836 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-kmtj8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf37ba8e55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identity=4836 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-kmtj8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bf37ba8e55 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4036 identity=4836 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-kmtj8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf37ba8e55 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4036 identity=4836 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-kmtj8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.66 c204037c-ecd2-48b8-9769-baa5ab4d9efa default }" containerID=1ab509f534fefba905abe5f7eb6a3c40ed6a872f2ffe83d8fef8afe0fd3082e5 datapathConfiguration="&{false false false false false }" interface=lxc70b1dadf2814 k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-s8l9v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ab509f534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-s8l9v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ab509f534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-s8l9v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ab509f534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 identity=6280 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-s8l9v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ab509f534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 identity=6280 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-s8l9v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ab509f534 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1520 identity=6280 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-s8l9v subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ab509f534 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1520 identity=6280 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-s8l9v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.241 4d60dce1-fb74-40d3-8ecf-c5aa131876fd default }" containerID=224fc1ffcd5630f6a41ff2a5059b41139d429162138b8649714fc5ab707b3f4a datapathConfiguration="&{false false false false false }" interface=lxcad6240f5c28a k8sPodName=openstack/pxc-operator-59d66cbc78-ltcps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=224fc1ffcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1953 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-ltcps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=224fc1ffcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1953 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-ltcps subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=224fc1ffcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1953 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-ltcps line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=224fc1ffcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1953 identity=1705 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-ltcps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=224fc1ffcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1953 identity=1705 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-ltcps subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=224fc1ffcd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1953 identity=1705 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-ltcps subsys=endpoint level=info msg="Successful endpoint creation" containerID=224fc1ffcd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1953 identity=1705 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-ltcps subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.182 7fb4b49e-7805-4ab9-8407-67da26d5b657 default }" containerID=67f16a9e8b76aa6b5495c2d7461fabee6078c3fd007dc02b13a49ede5829b4b2 datapathConfiguration="&{false false false false false }" interface=lxc20a657420b0f k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67f16a9e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67f16a9e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67f16a9e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identity=25942 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67f16a9e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identity=25942 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 7fe6f267-4936-476b-b1e3-85fa9e0ab818 default }" containerID=68e9e00d8212c04aee21fbc52f04a3c710181678018c6f538d5b5a52a7c9ea78 datapathConfiguration="&{false false false false false }" interface=lxceb34c7fc1fe2 k8sPodName=local-path-storage/helper-pod-create-pvc-f348a3f2-3d5c-4e51-8ab7-847f18c93fe8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68e9e00d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4022 ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f348a3f2-3d5c-4e51-8ab7-847f18c93fe8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68e9e00d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4022 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f348a3f2-3d5c-4e51-8ab7-847f18c93fe8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68e9e00d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4022 identity=1948 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f348a3f2-3d5c-4e51-8ab7-847f18c93fe8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68e9e00d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4022 identity=1948 ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f348a3f2-3d5c-4e51-8ab7-847f18c93fe8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67f16a9e8b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=648 identity=25942 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=67f16a9e8b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=648 identity=25942 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=68e9e00d82 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4022 identity=1948 ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f348a3f2-3d5c-4e51-8ab7-847f18c93fe8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68e9e00d82 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4022 identity=1948 ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f348a3f2-3d5c-4e51-8ab7-847f18c93fe8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68e9e00d82 endpointID=4022 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f348a3f2-3d5c-4e51-8ab7-847f18c93fe8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=68e9e00d82 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4022 identity=1948 ipv4=10.0.0.158 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f348a3f2-3d5c-4e51-8ab7-847f18c93fe8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 54eaada1-a390-4b70-98b5-3f5bff6a7033 default }" containerID=5eeafe394d2ddeac2b0cb6896cfd55256b56dbc8d10a0a9583eee19b87282176 datapathConfiguration="&{false false false false false }" interface=lxcfb9cce76d665 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5eeafe394d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5eeafe394d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=5eeafe394d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.43 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5eeafe394d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identity=1109 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5eeafe394d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identity=1109 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5eeafe394d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1987 identity=1109 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5eeafe394d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1987 identity=1109 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.64 379cbbbb-862c-464a-ba46-af1787c3ce04 default }" containerID=9bf41b16fd33128be77d0d085191402950611ea90c0b67af9fac9c22070a2215 datapathConfiguration="&{false false false false false }" interface=lxcde77eba31d63 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bf41b16fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3816 ipv4=10.0.0.64 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bf41b16fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3816 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.64 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9bf41b16fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3816 identity=64311 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.64 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bf41b16fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3816 identity=64311 ipv4=10.0.0.64 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9bf41b16fd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3816 identity=64311 ipv4=10.0.0.64 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9bf41b16fd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3816 identity=64311 ipv4=10.0.0.64 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.165 6ae562fb-6701-49e3-becd-d833a62cdd72 default }" containerID=8edc4ae2acc0e824a40836274237db20fde954443c9094670c67c9c0a537e52a datapathConfiguration="&{false false false false false }" interface=lxcb7244c5526b0 k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-9xwnx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8edc4ae2ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1833 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-9xwnx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 8b3bde72-dfd7-43d4-8f24-1075bfeeac91 default }" containerID=1d806a6dd77a17f9f8cee177cc1f1e8b493ecf7b1190fc6244b57869f2b4f93a datapathConfiguration="&{false false false false false }" interface=lxc2ee481eb3f42 k8sPodName=monitoring/node-feature-discovery-worker-6j49m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d806a6dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6j49m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8edc4ae2ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1833 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-9xwnx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=1d806a6dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6j49m subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8edc4ae2ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1833 identity=11967 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-9xwnx oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=8edc4ae2ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1833 identity=11967 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-9xwnx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1d806a6dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6j49m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d806a6dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 identity=47933 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6j49m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d806a6dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 identity=47933 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6j49m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8edc4ae2ac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1833 identity=11967 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-9xwnx subsys=endpoint level=info msg="Successful endpoint creation" containerID=8edc4ae2ac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1833 identity=11967 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-9xwnx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1d806a6dd7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1285 identity=47933 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6j49m subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d806a6dd7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1285 identity=47933 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6j49m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.65 4915b81b-0845-4e87-9810-70e4d0cbac7b default }" containerID=a2193d388308084f1bb279358302faeba7d22aed5fa0623b816ed2dae0f96eae datapathConfiguration="&{false false false false false }" interface=lxc82a00413a052 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9dcx5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2193d3883 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 ipv4=10.0.0.65 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9dcx5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2193d3883 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.65 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9dcx5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2193d3883 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identity=11693 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.65 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9dcx5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2193d3883 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identity=11693 ipv4=10.0.0.65 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9dcx5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2193d3883 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2127 identity=11693 ipv4=10.0.0.65 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9dcx5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2193d3883 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2127 identity=11693 ipv4=10.0.0.65 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9dcx5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=238 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SCE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00238 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00238 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00238 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00238:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=238 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.011917161524206311 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.87 f3e488bd-ebe6-4e5c-93ed-2862b9fbbb88 default }" containerID=f9852f7a333f306cf5d91d02e238d0dbc00e8f3cac21eac1351d87a9ebbf0aca datapathConfiguration="&{false false false false false }" interface=lxcdb5d168ec76b k8sPodName=monitoring/kube-prometheus-stack-admission-create-6fg5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9852f7a33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6fg5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9852f7a33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=b0923723-6e9e-4133-9a32-c657b68e0342,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=b0923723-6e9e-4133-9a32-c657b68e0342,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6fg5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f9852f7a33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6fg5t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=b0923723-6e9e-4133-9a32-c657b68e0342;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=b0923723-6e9e-4133-9a32-c657b68e0342;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9852f7a33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identity=36887 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=b0923723-6e9e-4133-9a32-c657b68e0342,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=b0923723-6e9e-4133-9a32-c657b68e0342,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6fg5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9852f7a33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identity=36887 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6fg5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9852f7a33 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=280 identity=36887 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6fg5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9852f7a33 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=280 identity=36887 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6fg5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f9852f7a33 endpointID=280 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-6fg5t subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=b0923723-6e9e-4133-9a32-c657b68e0342 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=b0923723-6e9e-4133-9a32-c657b68e0342 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f9852f7a33 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=280 identity=36887 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6fg5t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 736ca72f-a5a3-4363-a49e-431c5e4593c1 default }" containerID=514a290a99d05388c943a9126e626d5c213aaca7c555ceb1119f7dd961e2b207 datapathConfiguration="&{false false false false false }" interface=lxcac2c57c4680e k8sPodName=monitoring/kube-prometheus-stack-grafana-594d576b56-nrxbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=514a290a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-594d576b56-nrxbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=514a290a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-594d576b56-nrxbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.214 adf1b0b7-41d5-4247-90b6-30f3d050ed4c default }" containerID=54e273f50c608f7f163742209f5df3a806fa3983b695ba3ba513c8a1624e8a23 datapathConfiguration="&{false false false false false }" interface=lxc2e1c8ed97718 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-wpf4v labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.131 ddfbd3fe-388c-450a-baa1-4bd1a9915d63 default }" containerID=e387e959100c361c23ff3dc8048c50f8b2aad86e1d615d76352a2a7713a20305 datapathConfiguration="&{false false false false false }" interface=lxc19950f664a97 k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-7dklj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e387e95910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3013 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-7dklj subsys=endpoint level=info msg="New endpoint" containerID=54e273f50c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-wpf4v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e387e95910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3013 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-7dklj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54e273f50c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-wpf4v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=514a290a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-594d576b56-nrxbb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=514a290a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identity=33210 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-594d576b56-nrxbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=514a290a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identity=33210 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-594d576b56-nrxbb subsys=endpoint level=info msg="Invalid state transition skipped" containerID=e387e95910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3013 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-7dklj line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=54e273f50c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-wpf4v line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e387e95910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3013 identity=46873 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-7dklj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e387e95910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3013 identity=46873 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-7dklj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54e273f50c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identity=13577 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-wpf4v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54e273f50c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identity=13577 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-wpf4v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=514a290a99 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=146 identity=33210 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-594d576b56-nrxbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=514a290a99 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=146 identity=33210 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-594d576b56-nrxbb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e387e95910 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3013 identity=46873 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-7dklj subsys=endpoint level=info msg="Successful endpoint creation" containerID=e387e95910 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3013 identity=46873 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-7dklj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=54e273f50c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1434 identity=13577 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-wpf4v subsys=endpoint level=info msg="Successful endpoint creation" containerID=54e273f50c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1434 identity=13577 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-wpf4v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.157 9cd8a256-656e-4823-9cd4-c0b22a63f9d6 default }" containerID=922be5b034d9a2abbf685b82c9130020ec1705d06014e0e19867906ac48a913b datapathConfiguration="&{false false false false false }" interface=lxcddae9315e16a k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8dgqg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=922be5b034 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8dgqg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=922be5b034 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c0d13405-ab3e-4fb4-b60d-f10a8ba69fe5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=c0d13405-ab3e-4fb4-b60d-f10a8ba69fe5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8dgqg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=c0d13405-ab3e-4fb4-b60d-f10a8ba69fe5;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=c0d13405-ab3e-4fb4-b60d-f10a8ba69fe5;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=922be5b034 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identity=6409 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c0d13405-ab3e-4fb4-b60d-f10a8ba69fe5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=c0d13405-ab3e-4fb4-b60d-f10a8ba69fe5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8dgqg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=922be5b034 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identity=6409 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8dgqg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=922be5b034 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=919 identity=6409 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8dgqg subsys=endpoint level=info msg="Successful endpoint creation" containerID=922be5b034 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=919 identity=6409 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8dgqg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=922be5b034 endpointID=919 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-8dgqg subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=c0d13405-ab3e-4fb4-b60d-f10a8ba69fe5 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=c0d13405-ab3e-4fb4-b60d-f10a8ba69fe5 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=922be5b034 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=919 identity=6409 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8dgqg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 87f99c9a-ebea-43d1-9711-138d9aa6cd97 default }" containerID=50b04dcf422a5934527d48bb598409cf7d769d0bcba2d43c26bf3187b5aeb9d4 datapathConfiguration="&{false false false false false }" interface=lxc9c333e3797af k8sPodName=local-path-storage/helper-pod-create-pvc-f2987aeb-c886-4f5a-88e1-226f803a9cb2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50b04dcf42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2987aeb-c886-4f5a-88e1-226f803a9cb2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50b04dcf42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2987aeb-c886-4f5a-88e1-226f803a9cb2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50b04dcf42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=1948 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2987aeb-c886-4f5a-88e1-226f803a9cb2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50b04dcf42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=1948 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2987aeb-c886-4f5a-88e1-226f803a9cb2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50b04dcf42 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=472 identity=1948 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2987aeb-c886-4f5a-88e1-226f803a9cb2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=50b04dcf42 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=472 identity=1948 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2987aeb-c886-4f5a-88e1-226f803a9cb2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.37 efcd12e9-b25c-4c8b-abc2-7a2c3301cc89 default }" containerID=51f57a0a40d1feade34cb75a1e814a66c738c0defa3defcd0564f1102e184045 datapathConfiguration="&{false false false false false }" interface=lxc6a044e920bbc k8sPodName=local-path-storage/helper-pod-create-pvc-201cee7b-6a39-4a37-bdc6-7a306de302cf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51f57a0a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3873 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-201cee7b-6a39-4a37-bdc6-7a306de302cf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51f57a0a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3873 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-201cee7b-6a39-4a37-bdc6-7a306de302cf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=51f57a0a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3873 identity=1948 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-201cee7b-6a39-4a37-bdc6-7a306de302cf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51f57a0a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3873 identity=1948 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-201cee7b-6a39-4a37-bdc6-7a306de302cf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51f57a0a40 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3873 identity=1948 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-201cee7b-6a39-4a37-bdc6-7a306de302cf subsys=endpoint level=info msg="Successful endpoint creation" containerID=51f57a0a40 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3873 identity=1948 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-201cee7b-6a39-4a37-bdc6-7a306de302cf subsys=daemon level=info msg="Delete endpoint request" containerID=50b04dcf42 endpointID=472 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f2987aeb-c886-4f5a-88e1-226f803a9cb2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=50b04dcf42 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=472 identity=1948 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2987aeb-c886-4f5a-88e1-226f803a9cb2 subsys=endpoint level=info msg="Delete endpoint request" containerID=51f57a0a40 endpointID=3873 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-201cee7b-6a39-4a37-bdc6-7a306de302cf subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=51f57a0a40 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3873 identity=1948 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-201cee7b-6a39-4a37-bdc6-7a306de302cf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 df56b634-d292-4d62-be39-ab4a53666fe4 default }" containerID=4ae2b4902eccd7410baae3aee93b970609d79d52f22ee880db466ff9ac5b64c6 datapathConfiguration="&{false false false false false }" interface=lxc57167ef6e0bc k8sPodName=monitoring/loki-gateway-5cc45946cd-tjgx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ae2b4902e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-tjgx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ae2b4902e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-tjgx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ae2b4902e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identity=40733 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-tjgx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ae2b4902e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identity=40733 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-tjgx9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4ae2b4902e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3578 identity=40733 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-tjgx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ae2b4902e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3578 identity=40733 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-tjgx9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.50 e946ce98-7bb1-4d5f-86ab-31fd8ef16c49 default }" containerID=0e5fd85741ec4ace75fe8761d4683ad0e41d1de38dfabbf7c3dcb804cf9ab105 datapathConfiguration="&{false false false false false }" interface=lxc609285d4e226 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e5fd85741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e5fd85741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e5fd85741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=48672 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e5fd85741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=48672 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e5fd85741 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=454 identity=48672 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e5fd85741 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=454 identity=48672 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.236 5b22aadb-4d7c-4918-81a9-2828bea6836f default }" containerID=bc1253912087416bf2d377a5d8711a7e3e02580cca981dd0cde6a8008d3728d3 datapathConfiguration="&{false false false false false }" interface=lxc0a1ae649482f k8sPodName=local-path-storage/helper-pod-create-pvc-9bd7c090-f837-4c01-8b31-6d5c29d9cac4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc12539120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9bd7c090-f837-4c01-8b31-6d5c29d9cac4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc12539120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9bd7c090-f837-4c01-8b31-6d5c29d9cac4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc12539120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identity=1948 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9bd7c090-f837-4c01-8b31-6d5c29d9cac4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc12539120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identity=1948 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9bd7c090-f837-4c01-8b31-6d5c29d9cac4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc12539120 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1147 identity=1948 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9bd7c090-f837-4c01-8b31-6d5c29d9cac4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc12539120 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1147 identity=1948 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9bd7c090-f837-4c01-8b31-6d5c29d9cac4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 39a4811a-a8c4-4149-821d-975639fc8880 default }" containerID=204f5fbc30f70b09bd5b5677bb5eb76e100e8f066906de7e7a7e6a40c8617c15 datapathConfiguration="&{false false false false false }" interface=lxcd7e03b12f0e6 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=204f5fbc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=204f5fbc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=204f5fbc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=21795 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=204f5fbc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=21795 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=204f5fbc30 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=272 identity=21795 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=204f5fbc30 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=272 identity=21795 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.86 cd8adcbc-d0d1-4599-9a8f-6d018fc0af03 default }" containerID=6181a8ace132c9083e611570ea09eff823f4445efef1d3226c65ef1d764822f9 datapathConfiguration="&{false false false false false }" interface=lxcfa7003267dba k8sPodName=monitoring/vector-zzth5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6181a8ace1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2696 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/vector-zzth5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6181a8ace1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2696 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/vector-zzth5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6181a8ace1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2696 identity=51370 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/vector-zzth5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6181a8ace1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2696 identity=51370 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/vector-zzth5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6181a8ace1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2696 identity=51370 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/vector-zzth5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6181a8ace1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2696 identity=51370 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/vector-zzth5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bc12539120 endpointID=1147 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9bd7c090-f837-4c01-8b31-6d5c29d9cac4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bc12539120 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1147 identity=1948 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9bd7c090-f837-4c01-8b31-6d5c29d9cac4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 bc4a61d1-74ea-4e46-9f51-f6ea54014775 default }" containerID=a90c75a60fd593aa55af640975afef17468498f1a086f8ddc401fcce737a4a48 datapathConfiguration="&{false false false false false }" interface=lxc4ed0c6e4a16a k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a90c75a60f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a90c75a60f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a90c75a60f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 identity=23237 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a90c75a60f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 identity=23237 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a90c75a60f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3814 identity=23237 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a90c75a60f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3814 identity=23237 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.79 acc20117-93b3-41df-b5db-eccfcc5ba856 default }" containerID=750c871c339946b43706e87255f903e27341fc6fd68805a90ff07192704c12c4 datapathConfiguration="&{false false false false false }" interface=lxcd357aa74bc36 k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-bc5bl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=750c871c33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1979 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-bc5bl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=750c871c33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1979 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-bc5bl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=prometheus-pushgateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=prometheus-pushgateway;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=750c871c33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1979 identity=17061 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-bc5bl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=750c871c33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1979 identity=17061 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-bc5bl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=750c871c33 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1979 identity=17061 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-bc5bl subsys=endpoint level=info msg="Successful endpoint creation" containerID=750c871c33 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1979 identity=17061 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-bc5bl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.156 3676ec25-2e00-45dd-98f0-d82dc1d61db9 default }" containerID=794452351b72a9ff5a68d8ea04aa4e9efe61dd390e7a32f6ec2841dfa5602683 datapathConfiguration="&{false false false false false }" interface=lxc5d85923565d1 k8sPodName=openstack/memcached-memcached-c47d949f5-cgp2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=794452351b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2667 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-cgp2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=794452351b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2667 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-cgp2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=794452351b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2667 identity=25221 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-cgp2k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=794452351b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2667 identity=25221 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-cgp2k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=794452351b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2667 identity=25221 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-cgp2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=794452351b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2667 identity=25221 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-cgp2k subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.216 74843635-2fe5-4265-981f-9efa14d49073 default }" containerID=60a742eaca1b4d3ae6186666c33e6e263fec6c0d6ac479f24a4066f5a519fb37 datapathConfiguration="&{false false false false false }" interface=lxcb0197a724c8c k8sPodName=local-path-storage/helper-pod-create-pvc-e72b9073-d722-4d1e-b693-ba0fa76f4872 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60a742eaca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e72b9073-d722-4d1e-b693-ba0fa76f4872 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60a742eaca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e72b9073-d722-4d1e-b693-ba0fa76f4872 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60a742eaca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 identity=1948 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e72b9073-d722-4d1e-b693-ba0fa76f4872 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60a742eaca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 identity=1948 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e72b9073-d722-4d1e-b693-ba0fa76f4872 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60a742eaca datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=619 identity=1948 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e72b9073-d722-4d1e-b693-ba0fa76f4872 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60a742eaca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=619 identity=1948 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e72b9073-d722-4d1e-b693-ba0fa76f4872 subsys=daemon level=info msg="Delete endpoint request" containerID=60a742eaca endpointID=619 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e72b9073-d722-4d1e-b693-ba0fa76f4872 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=60a742eaca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=619 identity=1948 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e72b9073-d722-4d1e-b693-ba0fa76f4872 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 c7b60b35-5d72-4500-b5a9-112d9f6b0f72 default }" containerID=1717583ba5a249cedc34df4ad680e4198f64fe95df78f9e685ba9c2d687ad744 datapathConfiguration="&{false false false false false }" interface=lxcd05be25e2962 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1717583ba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1717583ba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1717583ba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=49216 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1717583ba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=49216 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1717583ba5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=587 identity=49216 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1717583ba5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=587 identity=49216 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.68 6697e216-3e19-4af5-aad3-70d33db6655e default }" containerID=67ce3ce87079c347a7aa3f03407e57890fde3ed2150bb805066decbb3851667e datapathConfiguration="&{false false false false false }" interface=lxc723a0d167225 k8sPodName=openstack/keystone-api-64785d5f64-2wrxb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67ce3ce870 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-64785d5f64-2wrxb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67ce3ce870 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-64785d5f64-2wrxb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=67ce3ce870 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-64785d5f64-2wrxb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67ce3ce870 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 identity=18546 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-64785d5f64-2wrxb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67ce3ce870 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 identity=18546 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-64785d5f64-2wrxb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 ededfd70-bb5c-4bd5-9b81-5f0183253f78 default }" containerID=b1d0fb6b09cf862c0638c650c69aac6d609e7b06c4cacc328cebe37f9eec2e4d datapathConfiguration="&{false false false false false }" interface=lxce9bb1659c6fd k8sPodName=openstack/keystone-credential-setup-775ks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1d0fb6b09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2676 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-credential-setup-775ks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1d0fb6b09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2676 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f19ad951-f13c-47cc-be75-87d7e8ffebf1,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=f19ad951-f13c-47cc-be75-87d7e8ffebf1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-credential-setup-775ks subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f19ad951-f13c-47cc-be75-87d7e8ffebf1;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=f19ad951-f13c-47cc-be75-87d7e8ffebf1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b1d0fb6b09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2676 identity=26793 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f19ad951-f13c-47cc-be75-87d7e8ffebf1,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=f19ad951-f13c-47cc-be75-87d7e8ffebf1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-credential-setup-775ks oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1d0fb6b09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2676 identity=26793 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-credential-setup-775ks subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67ce3ce870 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2542 identity=18546 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-64785d5f64-2wrxb subsys=endpoint level=info msg="Successful endpoint creation" containerID=67ce3ce870 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2542 identity=18546 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-64785d5f64-2wrxb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b1d0fb6b09 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2676 identity=26793 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-credential-setup-775ks subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1d0fb6b09 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2676 identity=26793 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-credential-setup-775ks subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b1d0fb6b09 endpointID=2676 k8sNamespace=openstack k8sPodName=keystone-credential-setup-775ks subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f19ad951-f13c-47cc-be75-87d7e8ffebf1 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=f19ad951-f13c-47cc-be75-87d7e8ffebf1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b1d0fb6b09 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2676 identity=26793 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-credential-setup-775ks subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 bcb837f1-f0fb-4ef8-86ea-688e6ec925fb default }" containerID=64150e8bb169d7a1f0e59ce1b79792702872830057632e4f1286ce082cdd091b datapathConfiguration="&{false false false false false }" interface=lxc94dcb9408281 k8sPodName=openstack/keystone-db-init-ggz2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64150e8bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-db-init-ggz2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64150e8bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=03ebaadb-22a6-4d28-b841-f49468b9ddf1,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=03ebaadb-22a6-4d28-b841-f49468b9ddf1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-db-init-ggz2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=03ebaadb-22a6-4d28-b841-f49468b9ddf1;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=03ebaadb-22a6-4d28-b841-f49468b9ddf1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64150e8bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=40773 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=03ebaadb-22a6-4d28-b841-f49468b9ddf1,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=03ebaadb-22a6-4d28-b841-f49468b9ddf1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-db-init-ggz2k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64150e8bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=40773 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-db-init-ggz2k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=64150e8bb1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=476 identity=40773 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-db-init-ggz2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=64150e8bb1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=476 identity=40773 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-db-init-ggz2k subsys=daemon level=info msg="Delete endpoint request" containerID=64150e8bb1 endpointID=476 k8sNamespace=openstack k8sPodName=keystone-db-init-ggz2k subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=03ebaadb-22a6-4d28-b841-f49468b9ddf1 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=03ebaadb-22a6-4d28-b841-f49468b9ddf1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=64150e8bb1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=476 identity=40773 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-db-init-ggz2k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 5204d555-e629-4695-9905-1295f9e8027b default }" containerID=9896efd4b0d3b6b0d21ccad0fde3219058f19d5cfc7c8db32038acca3cfc0838 datapathConfiguration="&{false false false false false }" interface=lxcdf38205fcb01 k8sPodName=openstack/keystone-fernet-setup-gtkxh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9896efd4b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-gtkxh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9896efd4b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cb460e1b-0018-4cdf-b2a5-9a1bbbec7ae3,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=cb460e1b-0018-4cdf-b2a5-9a1bbbec7ae3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-gtkxh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=cb460e1b-0018-4cdf-b2a5-9a1bbbec7ae3;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=cb460e1b-0018-4cdf-b2a5-9a1bbbec7ae3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9896efd4b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 identity=6148 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cb460e1b-0018-4cdf-b2a5-9a1bbbec7ae3,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=cb460e1b-0018-4cdf-b2a5-9a1bbbec7ae3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-gtkxh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9896efd4b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 identity=6148 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-gtkxh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9896efd4b0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=323 identity=6148 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-gtkxh subsys=endpoint level=info msg="Successful endpoint creation" containerID=9896efd4b0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=323 identity=6148 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-gtkxh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9896efd4b0 endpointID=323 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-gtkxh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=cb460e1b-0018-4cdf-b2a5-9a1bbbec7ae3 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=cb460e1b-0018-4cdf-b2a5-9a1bbbec7ae3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9896efd4b0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=323 identity=6148 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-gtkxh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 58968ab2-a2b9-4c01-acea-d916c7364000 default }" containerID=6404a8d365fa04b99dceb8029c115fba0efdc302e516a07849d5c160246252a6 datapathConfiguration="&{false false false false false }" interface=lxc149775c747dc k8sPodName=openstack/keystone-db-sync-kthpl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6404a8d365 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2319 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-db-sync-kthpl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6404a8d365 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2319 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2032706e-8b29-42de-a006-aff8411da537,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=2032706e-8b29-42de-a006-aff8411da537,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-db-sync-kthpl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2032706e-8b29-42de-a006-aff8411da537;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=2032706e-8b29-42de-a006-aff8411da537;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6404a8d365 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2319 identity=1504 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2032706e-8b29-42de-a006-aff8411da537,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=2032706e-8b29-42de-a006-aff8411da537,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-db-sync-kthpl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6404a8d365 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2319 identity=1504 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-db-sync-kthpl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6404a8d365 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2319 identity=1504 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-db-sync-kthpl subsys=endpoint level=info msg="Successful endpoint creation" containerID=6404a8d365 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2319 identity=1504 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-db-sync-kthpl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6404a8d365 endpointID=2319 k8sNamespace=openstack k8sPodName=keystone-db-sync-kthpl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2032706e-8b29-42de-a006-aff8411da537 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=2032706e-8b29-42de-a006-aff8411da537 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6404a8d365 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2319 identity=1504 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-db-sync-kthpl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 8273e7cd-adc8-4c15-ae02-8b2d4da98413 default }" containerID=9356fd51276a03529b99893212083d77e6edd768096409cef446bb8ba52de1b3 datapathConfiguration="&{false false false false false }" interface=lxc8c3b9a381714 k8sPodName=openstack/keystone-rabbit-init-fplhx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9356fd5127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-fplhx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9356fd5127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e5edc7ad-5f46-441a-ab3f-d6c457dd898d,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e5edc7ad-5f46-441a-ab3f-d6c457dd898d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-fplhx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e5edc7ad-5f46-441a-ab3f-d6c457dd898d;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e5edc7ad-5f46-441a-ab3f-d6c457dd898d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9356fd5127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-fplhx line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9356fd5127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 identity=10987 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e5edc7ad-5f46-441a-ab3f-d6c457dd898d,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e5edc7ad-5f46-441a-ab3f-d6c457dd898d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-fplhx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9356fd5127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 identity=10987 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-fplhx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9356fd5127 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3341 identity=10987 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-fplhx subsys=endpoint level=info msg="Successful endpoint creation" containerID=9356fd5127 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3341 identity=10987 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-fplhx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9356fd5127 endpointID=3341 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-fplhx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e5edc7ad-5f46-441a-ab3f-d6c457dd898d k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e5edc7ad-5f46-441a-ab3f-d6c457dd898d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9356fd5127 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3341 identity=10987 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-fplhx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 d9820ad6-4341-4ed9-8c93-e7d4b638f32f default }" containerID=22bec22b1062abd693abe382bf6a7e15c0980d3ebd2dd5a8579c0574b09f4b4c datapathConfiguration="&{false false false false false }" interface=lxc7c3823a613f4 k8sPodName=openstack/keystone-domain-manage-bsc72 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22bec22b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-bsc72 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22bec22b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=87292b3d-6e2f-49a6-be47-a0eef7ad0a86,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=87292b3d-6e2f-49a6-be47-a0eef7ad0a86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-bsc72 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=22bec22b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-bsc72 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=87292b3d-6e2f-49a6-be47-a0eef7ad0a86;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=87292b3d-6e2f-49a6-be47-a0eef7ad0a86;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22bec22b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=14008 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=87292b3d-6e2f-49a6-be47-a0eef7ad0a86,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=87292b3d-6e2f-49a6-be47-a0eef7ad0a86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-bsc72 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22bec22b10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=14008 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-bsc72 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22bec22b10 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=103 identity=14008 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-bsc72 subsys=endpoint level=info msg="Successful endpoint creation" containerID=22bec22b10 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=103 identity=14008 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-bsc72 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=22bec22b10 endpointID=103 k8sNamespace=openstack k8sPodName=keystone-domain-manage-bsc72 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=87292b3d-6e2f-49a6-be47-a0eef7ad0a86 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=87292b3d-6e2f-49a6-be47-a0eef7ad0a86 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=22bec22b10 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=103 identity=14008 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-bsc72 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 eb2674ae-2525-4088-ad62-e9d035f39ad0 default }" containerID=244186cd04f096523d438dd14346c825e51033ed49a9dfe52e2376729eb4fa45 datapathConfiguration="&{false false false false false }" interface=lxcd5f12300ed0a k8sPodName=openstack/keystone-bootstrap-gt6tg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=244186cd04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-bootstrap-gt6tg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=244186cd04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=14f90e65-ec45-4c7d-b0a4-c068141e73c3,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=14f90e65-ec45-4c7d-b0a4-c068141e73c3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-bootstrap-gt6tg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=14f90e65-ec45-4c7d-b0a4-c068141e73c3;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=14f90e65-ec45-4c7d-b0a4-c068141e73c3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=244186cd04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 identity=61522 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=14f90e65-ec45-4c7d-b0a4-c068141e73c3,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=14f90e65-ec45-4c7d-b0a4-c068141e73c3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-bootstrap-gt6tg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=244186cd04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 identity=61522 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-bootstrap-gt6tg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=244186cd04 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=992 identity=61522 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-bootstrap-gt6tg subsys=endpoint level=info msg="Successful endpoint creation" containerID=244186cd04 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=992 identity=61522 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-bootstrap-gt6tg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=244186cd04 endpointID=992 k8sNamespace=openstack k8sPodName=keystone-bootstrap-gt6tg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=14f90e65-ec45-4c7d-b0a4-c068141e73c3 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=14f90e65-ec45-4c7d-b0a4-c068141e73c3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=244186cd04 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=992 identity=61522 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-bootstrap-gt6tg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 e206572a-9366-4a96-bde7-e8014c929c40 default }" containerID=327d6172bf7b47f8520c22fe5a0ab44d3c8fe7bfd3e7ff8f84ffd5ef0576bb4e datapathConfiguration="&{false false false false false }" interface=lxc20ed5125af9e k8sPodName=local-path-storage/helper-pod-create-pvc-27dfe914-ade2-4bd7-9fde-0de5dfa847b8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=327d6172bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27dfe914-ade2-4bd7-9fde-0de5dfa847b8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=327d6172bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27dfe914-ade2-4bd7-9fde-0de5dfa847b8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=327d6172bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 identity=1948 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27dfe914-ade2-4bd7-9fde-0de5dfa847b8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=327d6172bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 identity=1948 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27dfe914-ade2-4bd7-9fde-0de5dfa847b8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=327d6172bf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=200 identity=1948 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27dfe914-ade2-4bd7-9fde-0de5dfa847b8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=327d6172bf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=200 identity=1948 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27dfe914-ade2-4bd7-9fde-0de5dfa847b8 subsys=daemon level=info msg="Delete endpoint request" containerID=327d6172bf endpointID=200 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-27dfe914-ade2-4bd7-9fde-0de5dfa847b8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=327d6172bf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=200 identity=1948 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27dfe914-ade2-4bd7-9fde-0de5dfa847b8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 02de6225-1fe1-4809-8fb2-caaddcefa2a6 default }" containerID=762798fa3ef0dcc98895d59972e144bfcf59724d07c925784f14c6c96cf69395 datapathConfiguration="&{false false false false false }" interface=lxc4f94508ddf30 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=762798fa3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=762798fa3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=762798fa3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=762798fa3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identity=52549 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=762798fa3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identity=52549 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=762798fa3e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1000 identity=52549 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=762798fa3e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1000 identity=52549 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.87 3508013e-7f9d-4c2a-8aed-6ed3303d4970 default }" containerID=d20632d553edcb467f0a6336204083dd8481274a57753cb2ac4e197e13aad0be datapathConfiguration="&{false false false false false }" interface=lxc1e803a00249f k8sPodName=openstack/barbican-api-757d677fb7-27lht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d20632d553 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-api-757d677fb7-27lht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d20632d553 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-api-757d677fb7-27lht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d20632d553 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-api-757d677fb7-27lht line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d20632d553 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 identity=10128 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-api-757d677fb7-27lht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d20632d553 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 identity=10128 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-api-757d677fb7-27lht subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 28ff2eea-b969-4e4f-b7ff-a00f6f7c9a10 default }" containerID=3b58789caad66778d60ca29eeef86ce6b5cf3d390a12664d8a1d4330494a53d1 datapathConfiguration="&{false false false false false }" interface=lxc340c6dc6168a k8sPodName=openstack/barbican-db-init-kb5k6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b58789caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-init-kb5k6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b58789caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=080263e5-0d90-42c6-b240-a5da2df3b4ce,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=080263e5-0d90-42c6-b240-a5da2df3b4ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-init-kb5k6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=080263e5-0d90-42c6-b240-a5da2df3b4ce;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=080263e5-0d90-42c6-b240-a5da2df3b4ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b58789caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identity=52830 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=080263e5-0d90-42c6-b240-a5da2df3b4ce,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=080263e5-0d90-42c6-b240-a5da2df3b4ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-init-kb5k6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b58789caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identity=52830 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-init-kb5k6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d20632d553 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1481 identity=10128 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-api-757d677fb7-27lht subsys=endpoint level=info msg="Successful endpoint creation" containerID=d20632d553 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1481 identity=10128 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-api-757d677fb7-27lht subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3b58789caa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=636 identity=52830 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-init-kb5k6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b58789caa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=636 identity=52830 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-init-kb5k6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3b58789caa endpointID=636 k8sNamespace=openstack k8sPodName=barbican-db-init-kb5k6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=080263e5-0d90-42c6-b240-a5da2df3b4ce k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=080263e5-0d90-42c6-b240-a5da2df3b4ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3b58789caa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=636 identity=52830 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-init-kb5k6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 2d8c209e-9b86-4ffd-88ea-6a86b773e6a8 default }" containerID=6aa749285ba397ec6d3535e8b364f9d3362792ae4789b15d59bf7cdc8e54c7b5 datapathConfiguration="&{false false false false false }" interface=lxc89bb01ff2d27 k8sPodName=openstack/barbican-db-sync-n74dk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6aa749285b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-db-sync-n74dk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6aa749285b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e4dd5395-39a5-42c5-90bb-f3dd0e65e3c7,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=e4dd5395-39a5-42c5-90bb-f3dd0e65e3c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-db-sync-n74dk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e4dd5395-39a5-42c5-90bb-f3dd0e65e3c7;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=e4dd5395-39a5-42c5-90bb-f3dd0e65e3c7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6aa749285b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identity=830 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e4dd5395-39a5-42c5-90bb-f3dd0e65e3c7,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=e4dd5395-39a5-42c5-90bb-f3dd0e65e3c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-db-sync-n74dk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6aa749285b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=623 identity=830 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-db-sync-n74dk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6aa749285b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=623 identity=830 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-db-sync-n74dk subsys=endpoint level=info msg="Successful endpoint creation" containerID=6aa749285b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=623 identity=830 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-db-sync-n74dk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6aa749285b endpointID=623 k8sNamespace=openstack k8sPodName=barbican-db-sync-n74dk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e4dd5395-39a5-42c5-90bb-f3dd0e65e3c7 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=e4dd5395-39a5-42c5-90bb-f3dd0e65e3c7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6aa749285b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=623 identity=830 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-db-sync-n74dk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 80d82e24-bf9b-4142-b86a-869620dd6eb2 default }" containerID=4dd54a4852db6039709e5beba12faab97a3423c36dcddf40a5987ba1ba83e579 datapathConfiguration="&{false false false false false }" interface=lxcc0fbeadecf1a k8sPodName=openstack/barbican-rabbit-init-j8bzg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dd54a4852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-rabbit-init-j8bzg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dd54a4852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=25e3059b-ab0b-4800-92a8-88fe73d3c698,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=25e3059b-ab0b-4800-92a8-88fe73d3c698,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-rabbit-init-j8bzg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=25e3059b-ab0b-4800-92a8-88fe73d3c698;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=25e3059b-ab0b-4800-92a8-88fe73d3c698;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4dd54a4852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identity=6412 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=25e3059b-ab0b-4800-92a8-88fe73d3c698,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=25e3059b-ab0b-4800-92a8-88fe73d3c698,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-rabbit-init-j8bzg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4dd54a4852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identity=6412 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-rabbit-init-j8bzg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4dd54a4852 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1344 identity=6412 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-rabbit-init-j8bzg subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dd54a4852 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1344 identity=6412 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-rabbit-init-j8bzg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4dd54a4852 endpointID=1344 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-j8bzg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=25e3059b-ab0b-4800-92a8-88fe73d3c698 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=25e3059b-ab0b-4800-92a8-88fe73d3c698 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4dd54a4852 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1344 identity=6412 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-rabbit-init-j8bzg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 6a7ae399-16f9-4185-b56b-e2394985d7ac default }" containerID=5c5feb674dc58e8dac1780118b8b6b5efbf84453bbf1cdb4a839fd86d372bf9e datapathConfiguration="&{false false false false false }" interface=lxc33c2c9d05e97 k8sPodName=openstack/barbican-ks-service-2d8j7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c5feb674d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-service-2d8j7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c5feb674d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8b6ef86b-e16c-4acb-8636-66e6170a8139,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=8b6ef86b-e16c-4acb-8636-66e6170a8139,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-service-2d8j7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8b6ef86b-e16c-4acb-8636-66e6170a8139;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=8b6ef86b-e16c-4acb-8636-66e6170a8139;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5c5feb674d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=5714 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8b6ef86b-e16c-4acb-8636-66e6170a8139,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=8b6ef86b-e16c-4acb-8636-66e6170a8139,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-service-2d8j7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c5feb674d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=5714 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-service-2d8j7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c5feb674d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=292 identity=5714 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-service-2d8j7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c5feb674d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=292 identity=5714 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-service-2d8j7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5c5feb674d endpointID=292 k8sNamespace=openstack k8sPodName=barbican-ks-service-2d8j7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8b6ef86b-e16c-4acb-8636-66e6170a8139 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=8b6ef86b-e16c-4acb-8636-66e6170a8139 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5c5feb674d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=292 identity=5714 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-service-2d8j7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 b90e3e19-7cac-4adc-b852-cd9b4efdbad4 default }" containerID=453d33e08ea574aefb5da353e57ff4880cfe18576db0dfa369ec31d05ff57d64 datapathConfiguration="&{false false false false false }" interface=lxc65fa70902c2d k8sPodName=openstack/barbican-ks-endpoints-z8trx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=453d33e08e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-endpoints-z8trx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=453d33e08e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b0295a32-7564-4dc9-96d3-9f8eeaf2d360,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b0295a32-7564-4dc9-96d3-9f8eeaf2d360,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-endpoints-z8trx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b0295a32-7564-4dc9-96d3-9f8eeaf2d360;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b0295a32-7564-4dc9-96d3-9f8eeaf2d360;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=453d33e08e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identity=7708 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b0295a32-7564-4dc9-96d3-9f8eeaf2d360,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b0295a32-7564-4dc9-96d3-9f8eeaf2d360,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-endpoints-z8trx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=453d33e08e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identity=7708 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-endpoints-z8trx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=453d33e08e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=589 identity=7708 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-endpoints-z8trx subsys=endpoint level=info msg="Successful endpoint creation" containerID=453d33e08e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=589 identity=7708 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-endpoints-z8trx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=453d33e08e endpointID=589 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-z8trx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b0295a32-7564-4dc9-96d3-9f8eeaf2d360 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b0295a32-7564-4dc9-96d3-9f8eeaf2d360 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=453d33e08e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=589 identity=7708 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-endpoints-z8trx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 e0cb63b0-ca62-4232-9451-d076ce089149 default }" containerID=e4d651d7625bbf77e5e8ffb6a11203eb17f2be7b4a7592ad8e59e4aa76f2229c datapathConfiguration="&{false false false false false }" interface=lxc55f077a49d3a k8sPodName=openstack/barbican-ks-user-s8n4p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4d651d762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-ks-user-s8n4p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4d651d762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=019ddbce-0c50-483a-b96b-c7d65c8bc5ab,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=019ddbce-0c50-483a-b96b-c7d65c8bc5ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-ks-user-s8n4p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=019ddbce-0c50-483a-b96b-c7d65c8bc5ab;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=019ddbce-0c50-483a-b96b-c7d65c8bc5ab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e4d651d762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-ks-user-s8n4p line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e4d651d762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identity=10903 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=019ddbce-0c50-483a-b96b-c7d65c8bc5ab,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=019ddbce-0c50-483a-b96b-c7d65c8bc5ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-ks-user-s8n4p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4d651d762 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3235 identity=10903 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-ks-user-s8n4p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4d651d762 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3235 identity=10903 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-ks-user-s8n4p subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4d651d762 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3235 identity=10903 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-ks-user-s8n4p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e4d651d762 endpointID=3235 k8sNamespace=openstack k8sPodName=barbican-ks-user-s8n4p subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=019ddbce-0c50-483a-b96b-c7d65c8bc5ab k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=019ddbce-0c50-483a-b96b-c7d65c8bc5ab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e4d651d762 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3235 identity=10903 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-ks-user-s8n4p subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03779742178094607 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.126 aece6881-3002-4e9a-8764-bd9a5c5ca998 default }" containerID=42a68a072c72c9192f8b826fae4eb9e07015731b023f96022ad47524dfa42877 datapathConfiguration="&{false false false false false }" interface=lxc6cbcc7bb3ca4 k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-65cf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42a68a072c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 ipv4=10.0.0.126 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-65cf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42a68a072c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.126 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-65cf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.10.10;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42a68a072c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identity=28456 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.126 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-65cf4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=42a68a072c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identity=28456 ipv4=10.0.0.126 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-65cf4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42a68a072c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1386 identity=28456 ipv4=10.0.0.126 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-65cf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=42a68a072c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1386 identity=28456 ipv4=10.0.0.126 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-65cf4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.162 63ce56bd-5b4f-4ab0-ab00-911970ace6a6 default }" containerID=3dee38b3e9cd3d00ad6bcb4bd296face850bacc890e1e7437a96317ec7eb58b4 datapathConfiguration="&{false false false false false }" interface=lxc89c8e6849cb4 k8sPodName=openstack/rook-ceph-detect-version-tdk79 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3dee38b3e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=624 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tdk79 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3dee38b3e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=624 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=9136c3cb-9fab-4200-a179-a89254c82369,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=9136c3cb-9fab-4200-a179-a89254c82369,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tdk79 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=9136c3cb-9fab-4200-a179-a89254c82369;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=9136c3cb-9fab-4200-a179-a89254c82369;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3dee38b3e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=624 identity=11057 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=9136c3cb-9fab-4200-a179-a89254c82369,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=9136c3cb-9fab-4200-a179-a89254c82369,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tdk79 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3dee38b3e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=624 identity=11057 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tdk79 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3dee38b3e9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=624 identity=11057 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tdk79 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3dee38b3e9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=624 identity=11057 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tdk79 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3dee38b3e9 endpointID=624 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-tdk79 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=9136c3cb-9fab-4200-a179-a89254c82369 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=9136c3cb-9fab-4200-a179-a89254c82369 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=3dee38b3e9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=624 identity=11057 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tdk79 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 08da7365-b948-4823-abf2-71242304e386 default }" containerID=2a74b1579262aa09f3b77dcb627b2ee0fb0739b37e202c38bbee8a6eec6e2032 datapathConfiguration="&{false false false false false }" interface=lxc89dad487dab3 k8sPodName=local-path-storage/helper-pod-create-pvc-53bea969-4302-4137-ba30-0a675e58f74d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a74b15792 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3555 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-53bea969-4302-4137-ba30-0a675e58f74d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a74b15792 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3555 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-53bea969-4302-4137-ba30-0a675e58f74d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a74b15792 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3555 identity=1948 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-53bea969-4302-4137-ba30-0a675e58f74d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a74b15792 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3555 identity=1948 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-53bea969-4302-4137-ba30-0a675e58f74d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a74b15792 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3555 identity=1948 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-53bea969-4302-4137-ba30-0a675e58f74d subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a74b15792 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3555 identity=1948 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-53bea969-4302-4137-ba30-0a675e58f74d subsys=daemon level=info msg="Delete endpoint request" containerID=2a74b15792 endpointID=3555 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-53bea969-4302-4137-ba30-0a675e58f74d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2a74b15792 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3555 identity=1948 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-53bea969-4302-4137-ba30-0a675e58f74d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 c7da4274-8ea8-480c-aa6d-02b2c13cb54e default }" containerID=68b5ae2408473c2ab32ec1b2909c1e5a5b8a841085d7f8517a6881887fcc4012 datapathConfiguration="&{false false false false false }" interface=lxc9641fe12ecf2 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68b5ae2408 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68b5ae2408 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68b5ae2408 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=37843 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68b5ae2408 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=37843 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=68b5ae2408 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=502 identity=37843 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68b5ae2408 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=502 identity=37843 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.238 48d54682-a821-4f9b-8fcc-75a42861143b default }" containerID=3a2785b61b73bbfaf2550d03d472441ce9729abc2dbe282dff08832c5031371e datapathConfiguration="&{false false false false false }" interface=lxc7c6e18ae3814 k8sPodName=openstack/ceph-object-controller-detect-version-pwjrx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a2785b61b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2322 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pwjrx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a2785b61b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2322 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=2dff3e10-409c-4079-b69c-cb42d6c4a11e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=2dff3e10-409c-4079-b69c-cb42d6c4a11e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pwjrx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3a2785b61b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2322 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.238 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pwjrx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=2dff3e10-409c-4079-b69c-cb42d6c4a11e;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=2dff3e10-409c-4079-b69c-cb42d6c4a11e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a2785b61b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2322 identity=436 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=2dff3e10-409c-4079-b69c-cb42d6c4a11e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=2dff3e10-409c-4079-b69c-cb42d6c4a11e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pwjrx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a2785b61b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2322 identity=436 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pwjrx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a2785b61b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2322 identity=436 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pwjrx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a2785b61b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2322 identity=436 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pwjrx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3a2785b61b endpointID=2322 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-pwjrx subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=2dff3e10-409c-4079-b69c-cb42d6c4a11e k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=2dff3e10-409c-4079-b69c-cb42d6c4a11e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=3a2785b61b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2322 identity=436 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pwjrx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 01d70e89-7146-4805-b931-1dfcc7a5b098 default }" containerID=3158cd3b532b3d7c77a4b93535e9c5d85e1f2232ec7a3c2ce95fff4ecf9a3490 datapathConfiguration="&{false false false false false }" interface=lxc8eff451f8e0a k8sPodName=openstack/glance-db-init-cchl8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3158cd3b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-init-cchl8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3158cd3b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c232d5c9-80dc-44b0-a03e-f8c4179a44e6,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=c232d5c9-80dc-44b0-a03e-f8c4179a44e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-init-cchl8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c232d5c9-80dc-44b0-a03e-f8c4179a44e6;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=c232d5c9-80dc-44b0-a03e-f8c4179a44e6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3158cd3b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=10952 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c232d5c9-80dc-44b0-a03e-f8c4179a44e6,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=c232d5c9-80dc-44b0-a03e-f8c4179a44e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-init-cchl8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3158cd3b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=10952 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-init-cchl8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3158cd3b53 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=274 identity=10952 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-init-cchl8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3158cd3b53 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=274 identity=10952 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-init-cchl8 subsys=daemon level=info msg="Delete endpoint request" containerID=3158cd3b53 endpointID=274 k8sNamespace=openstack k8sPodName=glance-db-init-cchl8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c232d5c9-80dc-44b0-a03e-f8c4179a44e6 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=c232d5c9-80dc-44b0-a03e-f8c4179a44e6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3158cd3b53 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=274 identity=10952 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-init-cchl8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 1156f676-085e-42b5-a77f-dab99740e5b7 default }" containerID=cae577cab045fe51efe04416f6470bfc805424eeb9871a207bba87bfdc8c3dd6 datapathConfiguration="&{false false false false false }" interface=lxc9de3fdd78c9e k8sPodName=openstack/glance-db-sync-qdksz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cae577cab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1598 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-db-sync-qdksz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cae577cab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1598 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8812d3ea-18a1-45f6-8d95-62496081bcec,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=8812d3ea-18a1-45f6-8d95-62496081bcec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-db-sync-qdksz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8812d3ea-18a1-45f6-8d95-62496081bcec;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=8812d3ea-18a1-45f6-8d95-62496081bcec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cae577cab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1598 identity=43707 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8812d3ea-18a1-45f6-8d95-62496081bcec,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=8812d3ea-18a1-45f6-8d95-62496081bcec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-db-sync-qdksz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cae577cab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1598 identity=43707 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-db-sync-qdksz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cae577cab0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1598 identity=43707 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-db-sync-qdksz subsys=endpoint level=info msg="Successful endpoint creation" containerID=cae577cab0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1598 identity=43707 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-db-sync-qdksz subsys=daemon level=info msg="Delete endpoint request" containerID=cae577cab0 endpointID=1598 k8sNamespace=openstack k8sPodName=glance-db-sync-qdksz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8812d3ea-18a1-45f6-8d95-62496081bcec k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=8812d3ea-18a1-45f6-8d95-62496081bcec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cae577cab0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1598 identity=43707 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-db-sync-qdksz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 1f2f3a1f-982d-4145-a7f8-ac7cf390c223 default }" containerID=35495d92fee47f4a97e96297fbcda3923cf2c54cbe735e3d847661db69940815 datapathConfiguration="&{false false false false false }" interface=lxc7253b90c81b2 k8sPodName=openstack/glance-rabbit-init-58zcn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35495d92fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-rabbit-init-58zcn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35495d92fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c9055dda-6e14-453d-bd28-f2d0c0f3cac1,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c9055dda-6e14-453d-bd28-f2d0c0f3cac1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-rabbit-init-58zcn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c9055dda-6e14-453d-bd28-f2d0c0f3cac1;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c9055dda-6e14-453d-bd28-f2d0c0f3cac1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35495d92fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=44304 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c9055dda-6e14-453d-bd28-f2d0c0f3cac1,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c9055dda-6e14-453d-bd28-f2d0c0f3cac1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-rabbit-init-58zcn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35495d92fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=44304 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-rabbit-init-58zcn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=35495d92fe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=94 identity=44304 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-rabbit-init-58zcn subsys=endpoint level=info msg="Successful endpoint creation" containerID=35495d92fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=94 identity=44304 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-rabbit-init-58zcn subsys=daemon level=info msg="Delete endpoint request" containerID=35495d92fe endpointID=94 k8sNamespace=openstack k8sPodName=glance-rabbit-init-58zcn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c9055dda-6e14-453d-bd28-f2d0c0f3cac1 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c9055dda-6e14-453d-bd28-f2d0c0f3cac1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=35495d92fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=94 identity=44304 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-rabbit-init-58zcn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 9a3425d7-c5cc-4d7f-bfe5-ab087630ddab default }" containerID=74781737d339476513c1e6e7fbb045a287865db77fbc839120fa0e92c5a365a7 datapathConfiguration="&{false false false false false }" interface=lxc74599724a25e k8sPodName=openstack/glance-ks-service-zsk22 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74781737d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=199 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-service-zsk22 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74781737d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=199 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f9b086f6-30b3-432c-8e70-f73566325a6c,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=f9b086f6-30b3-432c-8e70-f73566325a6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-service-zsk22 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f9b086f6-30b3-432c-8e70-f73566325a6c;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=f9b086f6-30b3-432c-8e70-f73566325a6c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74781737d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=199 identity=6116 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f9b086f6-30b3-432c-8e70-f73566325a6c,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=f9b086f6-30b3-432c-8e70-f73566325a6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-service-zsk22 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=74781737d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=199 identity=6116 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-service-zsk22 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74781737d3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=199 identity=6116 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-service-zsk22 subsys=endpoint level=info msg="Successful endpoint creation" containerID=74781737d3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=199 identity=6116 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-service-zsk22 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=74781737d3 endpointID=199 k8sNamespace=openstack k8sPodName=glance-ks-service-zsk22 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f9b086f6-30b3-432c-8e70-f73566325a6c k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=f9b086f6-30b3-432c-8e70-f73566325a6c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=74781737d3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=199 identity=6116 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-service-zsk22 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 e57e3596-0bd5-4530-83d1-56df1b917186 default }" containerID=57b177a34c3d54cfdb513b6ddc147cf57a4f94645d55c5387f8c04f49be9b029 datapathConfiguration="&{false false false false false }" interface=lxc34d078c12347 k8sPodName=openstack/glance-ks-endpoints-4x7vm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57b177a34c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-4x7vm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57b177a34c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=96c19154-165b-442c-996b-5ffff16430ac,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=96c19154-165b-442c-996b-5ffff16430ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-4x7vm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=57b177a34c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-4x7vm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=96c19154-165b-442c-996b-5ffff16430ac;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=96c19154-165b-442c-996b-5ffff16430ac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57b177a34c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 identity=65336 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=96c19154-165b-442c-996b-5ffff16430ac,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=96c19154-165b-442c-996b-5ffff16430ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-4x7vm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57b177a34c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 identity=65336 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-4x7vm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57b177a34c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1059 identity=65336 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-4x7vm subsys=endpoint level=info msg="Successful endpoint creation" containerID=57b177a34c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1059 identity=65336 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-4x7vm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57b177a34c endpointID=1059 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-4x7vm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=96c19154-165b-442c-996b-5ffff16430ac k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=96c19154-165b-442c-996b-5ffff16430ac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=57b177a34c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1059 identity=65336 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-4x7vm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 175b2946-1fe8-4391-a26a-9be9f5e57c4a default }" containerID=7ec967a3cfee98927fc0e9e6c0808ec9523b46180f33a1bc2e93ebad39dc8c4e datapathConfiguration="&{false false false false false }" interface=lxc7d7a6fe91c9a k8sPodName=openstack/glance-ks-user-jvwf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ec967a3cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-ks-user-jvwf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ec967a3cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=10a980a5-e5b1-46d6-a46a-fc7d4d08a2e9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=10a980a5-e5b1-46d6-a46a-fc7d4d08a2e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-ks-user-jvwf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=10a980a5-e5b1-46d6-a46a-fc7d4d08a2e9;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=10a980a5-e5b1-46d6-a46a-fc7d4d08a2e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ec967a3cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 identity=1889 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=10a980a5-e5b1-46d6-a46a-fc7d4d08a2e9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=10a980a5-e5b1-46d6-a46a-fc7d4d08a2e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-ks-user-jvwf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ec967a3cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 identity=1889 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-ks-user-jvwf4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7ec967a3cf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2766 identity=1889 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-ks-user-jvwf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ec967a3cf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2766 identity=1889 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-ks-user-jvwf4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.146 866d2724-a2fc-4d63-91ad-3b7d908b9e09 default }" containerID=c3458f28b1867dedb0ed2c49c0de080c4fd7bcc301b53b8dfdea46c3e12a3c3d datapathConfiguration="&{false false false false false }" interface=lxc77c36c501ca0 k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-829kk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3458f28b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-829kk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3458f28b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-829kk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook-version=v1.10.10;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3458f28b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=16516 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-829kk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3458f28b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=16516 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-829kk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3458f28b1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=349 identity=16516 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-829kk subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3458f28b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=349 identity=16516 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-829kk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.109 18e7214e-71e7-45fb-8c51-9e7c6c7555fc default }" containerID=6fbe2a6f1425b71c67a7cd0f60223c96a097fee4c883a9e1b2b3d5be4707b535 datapathConfiguration="&{false false false false false }" interface=lxc8a3a52f95f75 k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-z6ll5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fbe2a6f14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-z6ll5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fbe2a6f14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-z6ll5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fbe2a6f14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identity=25188 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-z6ll5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fbe2a6f14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identity=25188 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-z6ll5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6fbe2a6f14 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3 identity=25188 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-z6ll5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fbe2a6f14 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3 identity=25188 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-z6ll5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ec967a3cf endpointID=2766 k8sNamespace=openstack k8sPodName=glance-ks-user-jvwf4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=10a980a5-e5b1-46d6-a46a-fc7d4d08a2e9 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=10a980a5-e5b1-46d6-a46a-fc7d4d08a2e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7ec967a3cf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2766 identity=1889 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-ks-user-jvwf4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 66e13ff4-7101-41fe-bb65-57e83377dd9e default }" containerID=14b6d3a782449540ded5b1cec649dce9704ae352be8f287bfe66144acf92a95a datapathConfiguration="&{false false false false false }" interface=lxc970013adeeda k8sPodName=openstack/glance-metadefs-load-5gzst labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14b6d3a782 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-5gzst subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14b6d3a782 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8726255b-5d42-4838-978b-ce7ea11fcf03,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=8726255b-5d42-4838-978b-ce7ea11fcf03,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-5gzst subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8726255b-5d42-4838-978b-ce7ea11fcf03;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=8726255b-5d42-4838-978b-ce7ea11fcf03;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=14b6d3a782 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=45917 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8726255b-5d42-4838-978b-ce7ea11fcf03,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=8726255b-5d42-4838-978b-ce7ea11fcf03,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-5gzst oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14b6d3a782 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=45917 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-5gzst subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14b6d3a782 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=169 identity=45917 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-5gzst subsys=endpoint level=info msg="Successful endpoint creation" containerID=14b6d3a782 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=169 identity=45917 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-5gzst subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=14b6d3a782 endpointID=169 k8sNamespace=openstack k8sPodName=glance-metadefs-load-5gzst subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8726255b-5d42-4838-978b-ce7ea11fcf03 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=8726255b-5d42-4838-978b-ce7ea11fcf03 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=14b6d3a782 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=169 identity=45917 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-5gzst subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 aa9175d3-1113-493d-a822-70207b650512 default }" containerID=61c94ceff9d58519f1b351b0142566bf6a4adcd57dd2a9c69725c11b5c799165 datapathConfiguration="&{false false false false false }" interface=lxcda3feb0e2b04 k8sPodName=openstack/glance-storage-init-6kxff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61c94ceff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2272 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-storage-init-6kxff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61c94ceff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2272 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fc56aeb5-6124-48e6-b0b7-3a7f78ba9fc2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=fc56aeb5-6124-48e6-b0b7-3a7f78ba9fc2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-storage-init-6kxff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fc56aeb5-6124-48e6-b0b7-3a7f78ba9fc2;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=fc56aeb5-6124-48e6-b0b7-3a7f78ba9fc2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61c94ceff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2272 identity=47860 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fc56aeb5-6124-48e6-b0b7-3a7f78ba9fc2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=fc56aeb5-6124-48e6-b0b7-3a7f78ba9fc2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-storage-init-6kxff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61c94ceff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2272 identity=47860 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-storage-init-6kxff subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=61c94ceff9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2272 identity=47860 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-storage-init-6kxff subsys=endpoint level=info msg="Successful endpoint creation" containerID=61c94ceff9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2272 identity=47860 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-storage-init-6kxff subsys=daemon level=info msg="Delete endpoint request" containerID=61c94ceff9 endpointID=2272 k8sNamespace=openstack k8sPodName=glance-storage-init-6kxff subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fc56aeb5-6124-48e6-b0b7-3a7f78ba9fc2 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=fc56aeb5-6124-48e6-b0b7-3a7f78ba9fc2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=61c94ceff9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2272 identity=47860 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-storage-init-6kxff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 17840358-b696-4625-ad26-59f26f9c5056 default }" containerID=49e2d816fe28a7468155467e6224a1dba112a224f2131472fd154e77c8754a42 datapathConfiguration="&{false false false false false }" interface=lxc0b1b474b5fd3 k8sPodName=openstack/glance-api-67655b47c6-h266p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49e2d816fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-api-67655b47c6-h266p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49e2d816fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-api-67655b47c6-h266p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49e2d816fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 identity=1863 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-api-67655b47c6-h266p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49e2d816fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 identity=1863 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-api-67655b47c6-h266p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=49e2d816fe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1273 identity=1863 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-api-67655b47c6-h266p subsys=endpoint level=info msg="Successful endpoint creation" containerID=49e2d816fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1273 identity=1863 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-api-67655b47c6-h266p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.33 76ad431c-14c1-4c71-b5a9-fb4e6381be67 default }" containerID=8f8019aef4d0d7bf989116dfa51bdd98998b120c63666831e34e784518bd5a94 datapathConfiguration="&{false false false false false }" interface=lxc6ea420bf5016 k8sPodName=openstack/staffeln-conductor-7b679f7b88-trmv4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f8019aef4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-conductor-7b679f7b88-trmv4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f8019aef4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-conductor-7b679f7b88-trmv4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.67 3eee31b2-9480-4f09-9f70-c5cfdfca87b5 default }" containerID=6edf59ecb0ba2a421fd1e739c1460a0deb584703175a61298366318f5ec28850 datapathConfiguration="&{false false false false false }" interface=lxc6d80e6b54274 k8sPodName=openstack/staffeln-api-59b9668679-m5ktv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6edf59ecb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-api-59b9668679-m5ktv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6edf59ecb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-api-59b9668679-m5ktv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8f8019aef4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-conductor-7b679f7b88-trmv4 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=6edf59ecb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-api-59b9668679-m5ktv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f8019aef4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 identity=30835 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-conductor-7b679f7b88-trmv4 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=8f8019aef4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 identity=30835 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-conductor-7b679f7b88-trmv4 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6edf59ecb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identity=11487 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-api-59b9668679-m5ktv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6edf59ecb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identity=11487 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-api-59b9668679-m5ktv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 1a34b468-55b8-4c08-b3b9-c5804a93727d default }" containerID=bc54a0146879e7f547e94bb957584e9a16ed1af0890164066ce518be0e1fc5db datapathConfiguration="&{false false false false false }" interface=lxcb0651cd026dd k8sPodName=openstack/staffeln-db-init-hbzgc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc54a01468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-init-hbzgc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc54a01468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=946c3c9a-2c04-40bd-bece-9c6fbc24d896,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=946c3c9a-2c04-40bd-bece-9c6fbc24d896,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-init-hbzgc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=946c3c9a-2c04-40bd-bece-9c6fbc24d896;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=946c3c9a-2c04-40bd-bece-9c6fbc24d896;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc54a01468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identity=18315 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=946c3c9a-2c04-40bd-bece-9c6fbc24d896,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=946c3c9a-2c04-40bd-bece-9c6fbc24d896,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-init-hbzgc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc54a01468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identity=18315 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-init-hbzgc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f8019aef4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1718 identity=30835 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-conductor-7b679f7b88-trmv4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f8019aef4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1718 identity=30835 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-conductor-7b679f7b88-trmv4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6edf59ecb0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=189 identity=11487 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-api-59b9668679-m5ktv subsys=endpoint level=info msg="Successful endpoint creation" containerID=6edf59ecb0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=189 identity=11487 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-api-59b9668679-m5ktv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bc54a01468 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=676 identity=18315 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-init-hbzgc subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc54a01468 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=676 identity=18315 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-init-hbzgc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bc54a01468 endpointID=676 k8sNamespace=openstack k8sPodName=staffeln-db-init-hbzgc subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=946c3c9a-2c04-40bd-bece-9c6fbc24d896 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=946c3c9a-2c04-40bd-bece-9c6fbc24d896 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=bc54a01468 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=676 identity=18315 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-init-hbzgc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 a129ff36-529c-488e-9a48-8bfc399b2a4d default }" containerID=d4f02f54782fe94a98e601bff8071dde41550a403f9ea70cea09617baad8b0f7 datapathConfiguration="&{false false false false false }" interface=lxc2b30813022f4 k8sPodName=openstack/staffeln-db-sync-8hw89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4f02f5478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-8hw89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4f02f5478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f4096967-c55f-4933-8ee3-94427a407f6c,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f4096967-c55f-4933-8ee3-94427a407f6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-8hw89 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=f4096967-c55f-4933-8ee3-94427a407f6c;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=f4096967-c55f-4933-8ee3-94427a407f6c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4f02f5478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=45855 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f4096967-c55f-4933-8ee3-94427a407f6c,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f4096967-c55f-4933-8ee3-94427a407f6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-8hw89 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d4f02f5478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=45855 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-8hw89 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4f02f5478 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=22 identity=45855 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-8hw89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4f02f5478 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=22 identity=45855 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-8hw89 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager