level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.070474ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="91.123µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.172178ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="6.65µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=107.71181ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="16.381µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="19.46µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="72.053µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="76.162µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="95.823µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="458.565µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.64µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=18.017934ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.7863ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="36.781µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="155.175µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="266.528µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="83.473µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="54.541µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=42.546479ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="213.517µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.381µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.89.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.410912ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.042625ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.77µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.814758ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.36µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.72µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.79µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.57µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="48.491µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="61.942µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="62.992µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="275.569µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.95µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="171.536µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="652.212µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="727.654µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.101µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="7.82µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.89 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.89 ipAddr.ipv6="" k8sNodeIP=199.204.45.89 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.89" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.228" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.89" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.89} {CiliumInternalIP 10.0.0.228}] 10.0.0.0/24 [] [] 10.0.0.19 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:45553" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.709238567s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="11.8µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="5.051µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="42.102µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="13.98µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.854559988s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=287.783426ms file-path=/var/run/cilium/state/templates/e6f88663f5243ce5157e3b0865172deb0db824fc7ce16dfc6df070183f05dde3/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3759 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 fc65f8c0-2700-41f0-9c05-3035169f402a default }" containerID=66a8acf4733dc9f777f65dead19322b0831f6f87482bf8f90705ddc27f02677c datapathConfiguration="&{false false false false false }" interface=lxccf89d9343da2 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9p8jc labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.120 c585a1a0-d735-4282-95a6-cf99c4c5c5c2 default }" containerID=15749e8699cec8400626f6cf7ced92ec88faf47673e19a20ed1424c27bdeab00 datapathConfiguration="&{false false false false false }" interface=lxc123ebbcafee5 k8sPodName=kube-system/coredns-7c96b6546b-52nnv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66a8acf473 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 ipv4=10.0.0.121 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9p8jc subsys=endpoint level=info msg="New endpoint" containerID=15749e8699 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-52nnv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15749e8699 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-52nnv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=66a8acf473 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=45ca5936-92a2-4de4-a83d-ee74c3cd0e38,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=45ca5936-92a2-4de4-a83d-ee74c3cd0e38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.121 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9p8jc subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15749e8699 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 identity=18574 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-52nnv oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=15749e8699 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 identity=18574 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-52nnv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=66a8acf473 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9p8jc line=611 subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2624 ipv4=10.0.0.19 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2624 identityLabels="reserved:health" ipv4=10.0.0.19 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2624 identity=4 identityLabels="reserved:health" ipv4=10.0.0.19 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=45ca5936-92a2-4de4-a83d-ee74c3cd0e38;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=45ca5936-92a2-4de4-a83d-ee74c3cd0e38;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66a8acf473 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=18886 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=45ca5936-92a2-4de4-a83d-ee74c3cd0e38,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=45ca5936-92a2-4de4-a83d-ee74c3cd0e38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.121 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9p8jc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66a8acf473 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=18886 ipv4=10.0.0.121 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9p8jc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.042439756s file-path=/var/run/cilium/state/templates/7a150b23183f948ba79c64021e2f67670c4537e9673e0453b1c71f729d12516c/bpf_lxc.o subsys=datapath-loader level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Rewrote endpoint BPF program" containerID=66a8acf473 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=481 identity=18886 ipv4=10.0.0.121 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9p8jc subsys=endpoint level=info msg="Successful endpoint creation" containerID=66a8acf473 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=481 identity=18886 ipv4=10.0.0.121 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9p8jc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=15749e8699 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1412 identity=18574 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-52nnv subsys=endpoint level=info msg="Successful endpoint creation" containerID=15749e8699 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1412 identity=18574 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-52nnv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2624 identity=4 ipv4=10.0.0.19 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=66a8acf473 endpointID=481 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-9p8jc subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=45ca5936-92a2-4de4-a83d-ee74c3cd0e38 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=45ca5936-92a2-4de4-a83d-ee74c3cd0e38 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=66a8acf473 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=481 identity=18886 ipv4=10.0.0.121 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9p8jc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 16a97087-852a-4013-a009-30cf13068b79 default }" containerID=ea3b8ac21275f5736869ce8905fe723ab5eebd73210f8d18a1664eb53f05476e datapathConfiguration="&{false false false false false }" interface=lxccbebc9603b79 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4ndz2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea3b8ac212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 ipv4=10.0.0.102 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4ndz2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea3b8ac212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.102 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4ndz2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ea3b8ac212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.102 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4ndz2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea3b8ac212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identity=7666 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.102 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4ndz2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea3b8ac212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identity=7666 ipv4=10.0.0.102 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4ndz2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea3b8ac212 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1133 identity=7666 ipv4=10.0.0.102 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4ndz2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea3b8ac212 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1133 identity=7666 ipv4=10.0.0.102 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-4ndz2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3759 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03759 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03759 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03759 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03759:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3759 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 60f39062-910b-491e-adf2-fd35b5106f73 default }" containerID=eaf23546bc7754217d937108550d8dc1c9ff94bef35f8c69817bd53fc31d42b6 datapathConfiguration="&{false false false false false }" interface=lxc32e90b55384b k8sPodName=kube-system/coredns-67659f764b-68jq4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eaf23546bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3154 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-68jq4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eaf23546bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3154 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-68jq4 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=eaf23546bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3154 identity=18574 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-68jq4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eaf23546bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3154 identity=18574 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-68jq4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 0ed1fa51-3b0f-459b-ada9-b782a4aabcd9 default }" containerID=07691e64a1ab6dbcbabf2762e3f3b195a7efd04c98f6cadf6968fdfe77558a50 datapathConfiguration="&{false false false false false }" interface=lxce7656056b84c k8sPodName=kube-system/coredns-67659f764b-96fwc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07691e64a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-96fwc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07691e64a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-96fwc subsys=endpoint level=info msg="Identity of endpoint changed" containerID=07691e64a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=18574 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-96fwc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07691e64a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=18574 ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-96fwc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eaf23546bc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3154 identity=18574 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-68jq4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eaf23546bc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3154 identity=18574 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-68jq4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=07691e64a1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=60 identity=18574 ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-96fwc subsys=endpoint level=info msg="Successful endpoint creation" containerID=07691e64a1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=60 identity=18574 ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-96fwc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.144 3ca93ccd-8c44-48dc-a100-0a845ee9bd91 default }" containerID=58a84f2b0e42567503a1128798f737e531f6533c31c85fa33cec417982697371 datapathConfiguration="&{false false false false false }" interface=lxc15de0c0b600f k8sPodName=local-path-storage/local-path-provisioner-679c578f5-kgfd7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58a84f2b0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-kgfd7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58a84f2b0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-kgfd7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58a84f2b0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identity=36364 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-kgfd7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58a84f2b0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identity=36364 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-kgfd7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=58a84f2b0e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=47 identity=36364 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-kgfd7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=58a84f2b0e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=47 identity=36364 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-kgfd7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15749e8699 endpointID=1412 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-52nnv subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=15749e8699 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1412 identity=18574 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-52nnv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 899f6d33-f0ba-4b7a-9a89-045fb63a5a64 default }" containerID=36d5b34f390cd4996149cad5253e8df8f65d2bd7210500c5e6691a1c7fdae660 datapathConfiguration="&{false false false false false }" interface=lxce93878a49ead k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9rwzq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36d5b34f39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9rwzq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36d5b34f39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9rwzq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.39 3f3cdc87-4863-464b-91aa-b6810ec6912d default }" containerID=482d0aa7b9a34d89029c2dba3e2ef4457ed6e5323b8e5431c03803d795ff99fd datapathConfiguration="&{false false false false false }" interface=lxcf15c1f865f26 k8sPodName=cert-manager/cert-manager-75c4c745bc-jdgnm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=482d0aa7b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1261 ipv4=10.0.0.39 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-jdgnm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=482d0aa7b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1261 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.39 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-jdgnm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 727f09d8-5ee4-4145-8689-82a765439d69 default }" containerID=56bdbafa7e216a4c22b932071d8209695ed9e411615445a8c36196f081f35dda datapathConfiguration="&{false false false false false }" interface=lxc1197553505f3 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-b52rc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56bdbafa7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 ipv4=10.0.0.191 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-b52rc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56bdbafa7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.191 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-b52rc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=56bdbafa7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.191 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-b52rc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36d5b34f39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 identity=27078 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9rwzq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36d5b34f39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 identity=27078 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9rwzq subsys=endpoint level=info msg="Invalid state transition skipped" containerID=482d0aa7b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1261 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.39 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-jdgnm line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=482d0aa7b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1261 identity=22762 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.39 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-jdgnm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=482d0aa7b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1261 identity=22762 ipv4=10.0.0.39 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-jdgnm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56bdbafa7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identity=38101 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.191 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-b52rc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56bdbafa7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identity=38101 ipv4=10.0.0.191 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-b52rc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36d5b34f39 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=426 identity=27078 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9rwzq subsys=endpoint level=info msg="Successful endpoint creation" containerID=36d5b34f39 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=426 identity=27078 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9rwzq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=482d0aa7b9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1261 identity=22762 ipv4=10.0.0.39 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-jdgnm subsys=endpoint level=info msg="Successful endpoint creation" containerID=482d0aa7b9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1261 identity=22762 ipv4=10.0.0.39 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-jdgnm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=56bdbafa7e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=980 identity=38101 ipv4=10.0.0.191 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-b52rc subsys=endpoint level=info msg="Successful endpoint creation" containerID=56bdbafa7e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=980 identity=38101 ipv4=10.0.0.191 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-b52rc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.115 4837768a-e671-4ec0-abd6-0a30efcd90a8 default }" containerID=e6319c5ff94106aaaad83b2a2758a55ce3c6ab6b681705ef6482291de32c4906 datapathConfiguration="&{false false false false false }" interface=lxc0d6bfc330169 k8sPodName=cert-manager/cert-manager-startupapicheck-zqt8w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6319c5ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 ipv4=10.0.0.115 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zqt8w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6319c5ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b352932d-a679-443f-aa10-9f8c7841d177,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b352932d-a679-443f-aa10-9f8c7841d177,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.115 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zqt8w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=b352932d-a679-443f-aa10-9f8c7841d177;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=b352932d-a679-443f-aa10-9f8c7841d177;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6319c5ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 identity=779 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b352932d-a679-443f-aa10-9f8c7841d177,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b352932d-a679-443f-aa10-9f8c7841d177,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.115 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zqt8w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6319c5ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 identity=779 ipv4=10.0.0.115 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zqt8w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6319c5ff9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1760 identity=779 ipv4=10.0.0.115 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zqt8w subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6319c5ff9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1760 identity=779 ipv4=10.0.0.115 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zqt8w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e6319c5ff9 endpointID=1760 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-zqt8w subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=b352932d-a679-443f-aa10-9f8c7841d177 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=b352932d-a679-443f-aa10-9f8c7841d177 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=e6319c5ff9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1760 identity=779 ipv4=10.0.0.115 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zqt8w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 5d4fbeed-e719-4b1e-b776-4197775b90c4 default }" containerID=94fe8b63214f117440ba19ace3404078a2015d39634d16beabd2f1a5f825a943 datapathConfiguration="&{false false false false false }" interface=lxcade2d5c14d85 k8sPodName=ingress-nginx/ingress-nginx-admission-create-5sfzk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94fe8b6321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5sfzk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94fe8b6321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0f0b3230-05fa-4244-9f36-19cd29bed9d6,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=0f0b3230-05fa-4244-9f36-19cd29bed9d6,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5sfzk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=0f0b3230-05fa-4244-9f36-19cd29bed9d6;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=0f0b3230-05fa-4244-9f36-19cd29bed9d6;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94fe8b6321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=31344 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0f0b3230-05fa-4244-9f36-19cd29bed9d6,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=0f0b3230-05fa-4244-9f36-19cd29bed9d6,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5sfzk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=94fe8b6321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=31344 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5sfzk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94fe8b6321 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=31 identity=31344 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5sfzk subsys=endpoint level=info msg="Successful endpoint creation" containerID=94fe8b6321 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=31 identity=31344 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5sfzk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=94fe8b6321 endpointID=31 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-5sfzk subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=0f0b3230-05fa-4244-9f36-19cd29bed9d6 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=0f0b3230-05fa-4244-9f36-19cd29bed9d6 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=94fe8b6321 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=31 identity=31344 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5sfzk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 1d0c219e-df86-4643-b877-508795c8e2e7 default }" containerID=c19abd2d649faf5de8d8484f0fdaf1fae3186566824d25c08286d87a41f5ad7b datapathConfiguration="&{false false false false false }" interface=lxcdd7d3ef052b4 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hwh65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c19abd2d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hwh65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c19abd2d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hwh65 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c19abd2d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=55746 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hwh65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c19abd2d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=55746 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hwh65 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c19abd2d64 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=103 identity=55746 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hwh65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c19abd2d64 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=103 identity=55746 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hwh65 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.86 c586b0c2-1e6b-4d75-98a6-5af82b587641 default }" containerID=aea0fa93a9b45bba4273b1a6b149cf1e21016a7d18be13b59504ea10177fc119 datapathConfiguration="&{false false false false false }" interface=lxcb3b98b00d8fc k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hpkwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aea0fa93a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hpkwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aea0fa93a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2a044cf5-a081-4082-8b4f-909a2bf7d142,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2a044cf5-a081-4082-8b4f-909a2bf7d142,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hpkwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=2a044cf5-a081-4082-8b4f-909a2bf7d142;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=2a044cf5-a081-4082-8b4f-909a2bf7d142;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aea0fa93a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=881 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2a044cf5-a081-4082-8b4f-909a2bf7d142,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2a044cf5-a081-4082-8b4f-909a2bf7d142,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hpkwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aea0fa93a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=881 ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hpkwh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aea0fa93a9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=501 identity=881 ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hpkwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=aea0fa93a9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=501 identity=881 ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hpkwh subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aea0fa93a9 endpointID=501 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-hpkwh subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=2a044cf5-a081-4082-8b4f-909a2bf7d142 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=2a044cf5-a081-4082-8b4f-909a2bf7d142 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=aea0fa93a9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=501 identity=881 ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hpkwh subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=abb1ce00-b8d8-4478-b3ef-9e3df918a4a6] Description:}]" policyAddRequest=0077d33a-9ea8-4f82-aad7-c25d1a205f89 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0077d33a-9ea8-4f82-aad7-c25d1a205f89 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0ea0bd72-8ca4-420e-b77e-be55625a72c1] Description:}]" policyAddRequest=bf1b591a-8c08-46d9-b7b5-9f6dce4a1c6d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=bf1b591a-8c08-46d9-b7b5-9f6dce4a1c6d policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.84 5fd06a89-e605-4a95-aedd-8648994a307e default }" containerID=c4665b10e4a27dbb950ac3e680a27e4b1afe3fa020d6eb18111b1a2c7caa4303 datapathConfiguration="&{false false false false false }" interface=lxc06ff892711d6 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-2sx5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4665b10e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-2sx5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4665b10e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-2sx5d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4665b10e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=9356 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-2sx5d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c4665b10e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=9356 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-2sx5d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c4665b10e4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=249 identity=9356 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-2sx5d subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4665b10e4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=249 identity=9356 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-2sx5d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.242 3741d5f0-4e3a-4170-97aa-691df713c337 default }" containerID=65d6715f8d6a7b872193b159e175b773b25acee4cb34cad5f1e00194bee9d5c1 datapathConfiguration="&{false false false false false }" interface=lxc0421e0c86843 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-68ff9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65d6715f8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-68ff9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65d6715f8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-68ff9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65d6715f8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 identity=32709 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-68ff9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65d6715f8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 identity=32709 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-68ff9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65d6715f8d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1530 identity=32709 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-68ff9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=65d6715f8d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1530 identity=32709 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-68ff9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.151 d6f1d9bf-61d3-4828-84e8-11412a406ddf default }" containerID=798448a1ce64dbfe2b91c8f37ddf5666d64d42dccf0c1019e711f6dcad88c987 datapathConfiguration="&{false false false false false }" interface=lxcdc122f659beb k8sPodName=openstack/pxc-operator-69cb5bbdb9-hjcpz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=798448a1ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hjcpz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=798448a1ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hjcpz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=798448a1ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.151 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hjcpz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=798448a1ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identity=53347 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hjcpz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=798448a1ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identity=53347 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hjcpz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=798448a1ce datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2582 identity=53347 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hjcpz subsys=endpoint level=info msg="Successful endpoint creation" containerID=798448a1ce datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2582 identity=53347 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-hjcpz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.1 93f19ad7-8778-48f3-891b-028c6f6a9529 default }" containerID=05128d767af9844bc69acc2474cefd80622d37d1b00c18ffaa23d769b17f3d94 datapathConfiguration="&{false false false false false }" interface=lxc7015e8bba323 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05128d767a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05128d767a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05128d767a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 identity=17727 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05128d767a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 identity=17727 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=05128d767a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2371 identity=17727 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05128d767a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2371 identity=17727 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.48 ef194b16-53f0-4786-bf2d-05765f4dd8b0 default }" containerID=fc942fccf96f2a72ed36a36a34aa581f205d17ae9a1986c85a611c666adae18c datapathConfiguration="&{false false false false false }" interface=lxc9d5f1c334f7f k8sPodName=local-path-storage/helper-pod-create-pvc-b3840dce-80f2-423f-abfc-ea430eadd4c2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc942fccf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b3840dce-80f2-423f-abfc-ea430eadd4c2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc942fccf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b3840dce-80f2-423f-abfc-ea430eadd4c2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc942fccf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=55820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b3840dce-80f2-423f-abfc-ea430eadd4c2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc942fccf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=55820 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b3840dce-80f2-423f-abfc-ea430eadd4c2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc942fccf9 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=192 identity=55820 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b3840dce-80f2-423f-abfc-ea430eadd4c2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc942fccf9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=192 identity=55820 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b3840dce-80f2-423f-abfc-ea430eadd4c2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fc942fccf9 endpointID=192 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b3840dce-80f2-423f-abfc-ea430eadd4c2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fc942fccf9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=192 identity=55820 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b3840dce-80f2-423f-abfc-ea430eadd4c2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 cd40d2e1-c005-4fcb-a7d9-d3f2b9d34546 default }" containerID=8964c10a288d280dab52cf0187622d5d02da6e16f0b0306a92af96f7d01ebfcb datapathConfiguration="&{false false false false false }" interface=lxcfef9f634dc30 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8964c10a28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8964c10a28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8964c10a28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.224 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8964c10a28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=47143 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8964c10a28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=47143 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8964c10a28 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=24 identity=47143 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8964c10a28 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=24 identity=47143 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=cb11c68b-69a9-4353-810d-c9c46d7d5042] Description:}]" policyAddRequest=62d627a1-5110-4e69-8e3b-1bf8f5b34b99 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=62d627a1-5110-4e69-8e3b-1bf8f5b34b99 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.243 ec9880b2-114d-4207-837c-ed8ab25040e5 default }" containerID=f799a915e835a6326b85a99a0f9968e06b694ad7d4e066aa972a621d75921302 datapathConfiguration="&{false false false false false }" interface=lxcfecd8fe4dc9c k8sPodName=local-path-storage/helper-pod-create-pvc-03ce943a-04b8-4b7a-89ee-0e62428c4a91 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f799a915e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2372 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03ce943a-04b8-4b7a-89ee-0e62428c4a91 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f799a915e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2372 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03ce943a-04b8-4b7a-89ee-0e62428c4a91 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f799a915e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2372 identity=55820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03ce943a-04b8-4b7a-89ee-0e62428c4a91 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f799a915e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2372 identity=55820 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03ce943a-04b8-4b7a-89ee-0e62428c4a91 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f799a915e8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2372 identity=55820 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03ce943a-04b8-4b7a-89ee-0e62428c4a91 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f799a915e8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2372 identity=55820 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03ce943a-04b8-4b7a-89ee-0e62428c4a91 subsys=daemon level=info msg="Delete endpoint request" containerID=f799a915e8 endpointID=2372 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-03ce943a-04b8-4b7a-89ee-0e62428c4a91 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f799a915e8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2372 identity=55820 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03ce943a-04b8-4b7a-89ee-0e62428c4a91 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 5b44ed26-6e49-4413-abd9-fc1a63221bd4 default }" containerID=8a52da3ab992fa3de22fde46057b76a357f23db22571cf2a12968cc10825fef6 datapathConfiguration="&{false false false false false }" interface=lxcc64b91fa96dc k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a52da3ab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a52da3ab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a52da3ab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=8595 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a52da3ab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=8595 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a52da3ab9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=311 identity=8595 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a52da3ab9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=311 identity=8595 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=cb1a836f-aa45-4b23-80cf-1af032076e9a] Description:}]" policyAddRequest=59744f76-fc79-4e49-8a57-3d0f01ca7707 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=59744f76-fc79-4e49-8a57-3d0f01ca7707 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.193 335ad515-4e59-44de-b1f0-b604c713b04c default }" containerID=455c08992be7ba54e20d6fc0de54126cbfa7d7170b7844e78298ad7bb74ff074 datapathConfiguration="&{false false false false false }" interface=lxc534ccfbb5611 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=455c08992b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2974 ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=455c08992b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2974 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=455c08992b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2974 identity=12219 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=455c08992b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2974 identity=12219 ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=455c08992b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2974 identity=12219 ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=455c08992b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2974 identity=12219 ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.007930120253763847 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.37 eec8a956-0190-4394-ae5f-5c1a7e2fb372 default }" containerID=b2c8af318fa06fa29916d3034b5e0a065ef72f641e1d2e3bbac6bd8ff2277e9d datapathConfiguration="&{false false false false false }" interface=lxc9887ba0c9426 k8sPodName=monitoring/node-feature-discovery-worker-v44cr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2c8af318f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-v44cr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2c8af318f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-v44cr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2c8af318f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identity=1485 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-v44cr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2c8af318f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identity=1485 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-v44cr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 cb629e96-aa0e-4d32-a3aa-0e3a2b7eb076 default }" containerID=16161c90ec2d189ae7b3f874b59f6493e1a6d9ed0ea74a354782fd3ca6d3bde8 datapathConfiguration="&{false false false false false }" interface=lxcc410ea0487c2 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-85wdk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16161c90ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-85wdk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16161c90ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-85wdk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 7abc1c33-d01c-4ace-8996-abd6cfa0aea1 default }" containerID=c1a4eb5335b46f93faba25505bed202e4a02452976c649d53ff1511c42f877a1 datapathConfiguration="&{false false false false false }" interface=lxcd3fa4f0b78fe k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bccd7 labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=c1a4eb5335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bccd7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1a4eb5335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bccd7 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=16161c90ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=20013 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-85wdk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16161c90ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=20013 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-85wdk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1a4eb5335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identity=62357 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bccd7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1a4eb5335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identity=62357 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bccd7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2c8af318f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=362 identity=1485 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-v44cr subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2c8af318f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=362 identity=1485 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-v44cr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=16161c90ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=151 identity=20013 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-85wdk subsys=endpoint level=info msg="Successful endpoint creation" containerID=16161c90ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=151 identity=20013 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-85wdk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c1a4eb5335 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3015 identity=62357 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bccd7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1a4eb5335 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3015 identity=62357 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bccd7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.214 255f1f23-b803-4c5b-a2ad-5d62e0af6a2a default }" containerID=6f09fafe5cbb3c67262107f956c2e67e914f71f1002c0d46fc48a826d9972f93 datapathConfiguration="&{false false false false false }" interface=lxc86607e2db337 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wzhnx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f09fafe5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2412 ipv4=10.0.0.214 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wzhnx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f09fafe5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2412 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.214 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wzhnx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f09fafe5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2412 identity=11353 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.214 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wzhnx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f09fafe5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2412 identity=11353 ipv4=10.0.0.214 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wzhnx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f09fafe5c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2412 identity=11353 ipv4=10.0.0.214 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wzhnx subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f09fafe5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2412 identity=11353 ipv4=10.0.0.214 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wzhnx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3759 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03759 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03759 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03759 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03759:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3759 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 ec88dfd8-56f2-44f0-8812-95dc02e95c66 default }" containerID=e63988ff23ef0fcdff730461a376b707228050c7b2517bb65ce60c0b440621e5 datapathConfiguration="&{false false false false false }" interface=lxc0357e72f7201 k8sPodName=monitoring/kube-prometheus-stack-admission-create-ndt9v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e63988ff23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ndt9v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e63988ff23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=feb3ecd0-b95a-4ca4-9e6a-357b405c6cf7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=feb3ecd0-b95a-4ca4-9e6a-357b405c6cf7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ndt9v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=feb3ecd0-b95a-4ca4-9e6a-357b405c6cf7;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=feb3ecd0-b95a-4ca4-9e6a-357b405c6cf7;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e63988ff23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=15713 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=feb3ecd0-b95a-4ca4-9e6a-357b405c6cf7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=feb3ecd0-b95a-4ca4-9e6a-357b405c6cf7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ndt9v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e63988ff23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=15713 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ndt9v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e63988ff23 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=57 identity=15713 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ndt9v subsys=endpoint level=info msg="Successful endpoint creation" containerID=e63988ff23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=57 identity=15713 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ndt9v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e63988ff23 endpointID=57 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-ndt9v subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=feb3ecd0-b95a-4ca4-9e6a-357b405c6cf7 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=feb3ecd0-b95a-4ca4-9e6a-357b405c6cf7 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e63988ff23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=57 identity=15713 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ndt9v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 b69d750f-143e-46ed-b18c-c9dbe48b514b default }" containerID=ef0c63bdc4188a887dea6804c3f3efb10f3c1a3da0d9a77563ec60daff713aed datapathConfiguration="&{false false false false false }" interface=lxccbbc8c1f77e9 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-gkv8k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef0c63bdc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4078 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-gkv8k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef0c63bdc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4078 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-gkv8k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef0c63bdc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4078 identity=28930 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-gkv8k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef0c63bdc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4078 identity=28930 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-gkv8k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ef0c63bdc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4078 identity=28930 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-gkv8k subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef0c63bdc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4078 identity=28930 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-gkv8k subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.163 5bac62ba-9507-4cc2-a28e-4c69cd7c1bc2 default }" containerID=ed541a24ba08761ac84c37a11b1c1695b0c2332e245e4ba2895b45e2521b13a5 datapathConfiguration="&{false false false false false }" interface=lxc5e815a2782ae k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-q5tnc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed541a24ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3474 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-q5tnc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 3473407a-5113-40cb-8c66-e636840d027e default }" containerID=8013f2244ade2af4814cc97577865899778578496ffc0ff8a6ff52407d2102ca datapathConfiguration="&{false false false false false }" interface=lxcd36ffda99b48 k8sPodName=monitoring/kube-prometheus-stack-grafana-7588b74d6b-mlzp6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8013f2244a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=458 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7588b74d6b-mlzp6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed541a24ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3474 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-q5tnc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8013f2244a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=458 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7588b74d6b-mlzp6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed541a24ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3474 identity=52740 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-q5tnc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed541a24ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3474 identity=52740 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-q5tnc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8013f2244a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=458 identity=4024 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7588b74d6b-mlzp6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8013f2244a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=458 identity=4024 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7588b74d6b-mlzp6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed541a24ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3474 identity=52740 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-q5tnc subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed541a24ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3474 identity=52740 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-q5tnc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8013f2244a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=458 identity=4024 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7588b74d6b-mlzp6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8013f2244a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=458 identity=4024 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7588b74d6b-mlzp6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 96b7f16b-05c5-4da9-90c7-dd809fcd1de6 default }" containerID=aca22ec60411614ae1bcf7e144dd3c744275e6d51aecb523a33a3cac30ffbd61 datapathConfiguration="&{false false false false false }" interface=lxc02f66f7a8139 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-v9lsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aca22ec604 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-v9lsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aca22ec604 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=7387f69c-5252-4a89-959d-4aff32585d7c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=7387f69c-5252-4a89-959d-4aff32585d7c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-v9lsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=7387f69c-5252-4a89-959d-4aff32585d7c;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=7387f69c-5252-4a89-959d-4aff32585d7c;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aca22ec604 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identity=59568 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=7387f69c-5252-4a89-959d-4aff32585d7c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=7387f69c-5252-4a89-959d-4aff32585d7c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-v9lsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aca22ec604 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identity=59568 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-v9lsz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aca22ec604 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1523 identity=59568 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-v9lsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=aca22ec604 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1523 identity=59568 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-v9lsz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.246 96a0ffae-301a-48c9-95d8-9b6392111cfe default }" containerID=e963fe2c0ed06380aca8bc1f83a2b77b73801e8cb8a7a2f3537311f7eb66a1cd datapathConfiguration="&{false false false false false }" interface=lxc654bcfc0c595 k8sPodName=local-path-storage/helper-pod-create-pvc-9799d1f4-c2c1-4ca9-af34-a61771b54773 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e963fe2c0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9799d1f4-c2c1-4ca9-af34-a61771b54773 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e963fe2c0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9799d1f4-c2c1-4ca9-af34-a61771b54773 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e963fe2c0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identity=55820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9799d1f4-c2c1-4ca9-af34-a61771b54773 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e963fe2c0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identity=55820 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9799d1f4-c2c1-4ca9-af34-a61771b54773 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e963fe2c0e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1861 identity=55820 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9799d1f4-c2c1-4ca9-af34-a61771b54773 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e963fe2c0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1861 identity=55820 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9799d1f4-c2c1-4ca9-af34-a61771b54773 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.229 b59ae1c3-097d-4b6e-bd5a-14ef9c89a557 default }" containerID=d54ac51ba98a49469459ad04d83efd86d58e6cb14de0eac163ee1f422486ae62 datapathConfiguration="&{false false false false false }" interface=lxc8e2ccc13bdf8 k8sPodName=local-path-storage/helper-pod-create-pvc-653b78ed-4228-4679-b490-48c9b14cea8a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d54ac51ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-653b78ed-4228-4679-b490-48c9b14cea8a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d54ac51ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-653b78ed-4228-4679-b490-48c9b14cea8a subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d54ac51ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identity=55820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-653b78ed-4228-4679-b490-48c9b14cea8a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d54ac51ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identity=55820 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-653b78ed-4228-4679-b490-48c9b14cea8a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d54ac51ba9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=418 identity=55820 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-653b78ed-4228-4679-b490-48c9b14cea8a subsys=endpoint level=info msg="Successful endpoint creation" containerID=d54ac51ba9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=418 identity=55820 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-653b78ed-4228-4679-b490-48c9b14cea8a subsys=daemon level=info msg="Delete endpoint request" containerID=aca22ec604 endpointID=1523 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-v9lsz subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=7387f69c-5252-4a89-959d-4aff32585d7c k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=7387f69c-5252-4a89-959d-4aff32585d7c k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=aca22ec604 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1523 identity=59568 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-v9lsz subsys=endpoint level=info msg="Delete endpoint request" containerID=e963fe2c0e endpointID=1861 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9799d1f4-c2c1-4ca9-af34-a61771b54773 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=d54ac51ba9 endpointID=418 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-653b78ed-4228-4679-b490-48c9b14cea8a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e963fe2c0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1861 identity=55820 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9799d1f4-c2c1-4ca9-af34-a61771b54773 subsys=endpoint level=info msg="Removed endpoint" containerID=d54ac51ba9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=418 identity=55820 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-653b78ed-4228-4679-b490-48c9b14cea8a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 e738ce32-362a-450b-b4f4-7565492e5984 default }" containerID=78200d5a41ab9bfe1bed8a684ed998d6330aac3caeba528706ff5973518c461e datapathConfiguration="&{false false false false false }" interface=lxcb29074ba8383 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78200d5a41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78200d5a41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78200d5a41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identity=42091 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78200d5a41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identity=42091 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=78200d5a41 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1381 identity=42091 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=78200d5a41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1381 identity=42091 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.26 c21a7621-cb3e-4ade-b550-a087018a6e83 default }" containerID=7c8830bf75471c58b616d5b55f4c023a44964d01a1eecb3b3c62f0bb224b9eea datapathConfiguration="&{false false false false false }" interface=lxc3a780a52fa3d k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c8830bf75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c8830bf75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c8830bf75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=8167 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c8830bf75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=8167 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c8830bf75 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=152 identity=8167 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c8830bf75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=152 identity=8167 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.202 82549ef3-176c-4e33-bb15-2ca58384a383 default }" containerID=d36ee9aceaf134999b4fb6437d3bc787eb9b860d6559a95379c1853cfbdcecd7 datapathConfiguration="&{false false false false false }" interface=lxc7fd70a608ac2 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d36ee9acea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d36ee9acea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d36ee9acea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identity=46397 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d36ee9acea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identity=46397 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d36ee9acea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=682 identity=46397 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d36ee9acea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=682 identity=46397 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.85 cf466980-955b-4306-814e-3f7c0a3e04ad default }" containerID=0631f07494a0006dae05a97194c79a6a6e559925ed369efd4a6fa545809c1b1b datapathConfiguration="&{false false false false false }" interface=lxc071e7b1c0709 k8sPodName=monitoring/loki-gateway-cf54cb88c-p8bh6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0631f07494 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-p8bh6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0631f07494 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-p8bh6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0631f07494 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identity=27491 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-p8bh6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0631f07494 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identity=27491 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-p8bh6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 782f549d-54a3-4793-8079-445f52286aab default }" containerID=4fdb4fb64512e8c0c7b68d22aad62ab6f86284de7b665c61d56ef0ca8c561ae3 datapathConfiguration="&{false false false false false }" interface=lxc728283922ca2 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fdb4fb645 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 8d0bd163-cc42-4060-9731-f6caca9c20f6 default }" containerID=2a247ee1820b3409017456b691fab8740c59577d790c0ccb9f380d29f8f2ddda datapathConfiguration="&{false false false false false }" interface=lxcfbd4a0741d44 k8sPodName=local-path-storage/helper-pod-create-pvc-d4abe00c-be6c-4567-918f-cf953f819052 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a247ee182 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4abe00c-be6c-4567-918f-cf953f819052 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a247ee182 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4abe00c-be6c-4567-918f-cf953f819052 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a247ee182 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 identity=55820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4abe00c-be6c-4567-918f-cf953f819052 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a247ee182 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 identity=55820 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4abe00c-be6c-4567-918f-cf953f819052 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fdb4fb645 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fdb4fb645 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=1662 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fdb4fb645 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=1662 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0631f07494 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=355 identity=27491 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-p8bh6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0631f07494 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=355 identity=27491 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-p8bh6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2a247ee182 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3686 identity=55820 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4abe00c-be6c-4567-918f-cf953f819052 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a247ee182 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3686 identity=55820 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4abe00c-be6c-4567-918f-cf953f819052 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4fdb4fb645 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1559 identity=1662 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fdb4fb645 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1559 identity=1662 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.244 2990ce10-1fcb-4ad5-a728-51a466882001 default }" containerID=6c8d939d01f711dc9d18b69cdd2605047d4940d9f16f65e1f8cdaaa0a192d070 datapathConfiguration="&{false false false false false }" interface=lxc5081382a75e4 k8sPodName=monitoring/vector-97bvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c8d939d01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/vector-97bvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c8d939d01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/vector-97bvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c8d939d01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identity=3915 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/vector-97bvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c8d939d01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identity=3915 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/vector-97bvw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c8d939d01 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=459 identity=3915 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/vector-97bvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c8d939d01 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=459 identity=3915 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/vector-97bvw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2a247ee182 endpointID=3686 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d4abe00c-be6c-4567-918f-cf953f819052 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2a247ee182 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3686 identity=55820 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4abe00c-be6c-4567-918f-cf953f819052 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 2d3aa3b0-a73a-4939-9368-91d8019f089d default }" containerID=41658a021f96aef03309787647d99c4df53211d38431328b4066bc243dac29b3 datapathConfiguration="&{false false false false false }" interface=lxc172b286bbdbd k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41658a021f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41658a021f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41658a021f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 identity=7773 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=41658a021f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 identity=7773 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41658a021f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=596 identity=7773 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=41658a021f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=596 identity=7773 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.236 d32d4ef4-3d16-4068-a179-ef1e022b9504 default }" containerID=3235fac6dac0a0a0402b1d070c9cb7c1fd8cae181b0d3200ffbb2de7c88fb067 datapathConfiguration="&{false false false false false }" interface=lxc7ab24142fb9a k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s2k7h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3235fac6da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s2k7h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3235fac6da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s2k7h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3235fac6da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identity=27196 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s2k7h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3235fac6da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identity=27196 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s2k7h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3235fac6da datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=550 identity=27196 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s2k7h subsys=endpoint level=info msg="Successful endpoint creation" containerID=3235fac6da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=550 identity=27196 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s2k7h subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.56 88b06035-2e2d-4a8c-8b2d-fc7a3c3ce229 default }" containerID=af15f02b1a238da37ffc405bd33ed39cd38dfaa14ede52d25b0fee46f39502f8 datapathConfiguration="&{false false false false false }" interface=lxc2b52d5252677 k8sPodName=openstack/memcached-memcached-6479589586-mrlt9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af15f02b1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mrlt9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af15f02b1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mrlt9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af15f02b1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 identity=29102 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mrlt9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af15f02b1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 identity=29102 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mrlt9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=af15f02b1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1156 identity=29102 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mrlt9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af15f02b1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1156 identity=29102 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mrlt9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 3afee169-783a-46e4-a8e7-d6e3976fdc2c default }" containerID=57445915902e4b5d59e43bc31eb7a3b90bd8061729a5df1307604b6c7cc0e657 datapathConfiguration="&{false false false false false }" interface=lxc12b9cc03762d k8sPodName=local-path-storage/helper-pod-create-pvc-e379e58a-e930-40bf-8eb2-a96a257e0af3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5744591590 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=344 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e379e58a-e930-40bf-8eb2-a96a257e0af3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5744591590 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=344 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e379e58a-e930-40bf-8eb2-a96a257e0af3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5744591590 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=344 identity=55820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e379e58a-e930-40bf-8eb2-a96a257e0af3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5744591590 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=344 identity=55820 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e379e58a-e930-40bf-8eb2-a96a257e0af3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5744591590 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=344 identity=55820 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e379e58a-e930-40bf-8eb2-a96a257e0af3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5744591590 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=344 identity=55820 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e379e58a-e930-40bf-8eb2-a96a257e0af3 subsys=daemon level=info msg="Delete endpoint request" containerID=5744591590 endpointID=344 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e379e58a-e930-40bf-8eb2-a96a257e0af3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5744591590 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=344 identity=55820 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e379e58a-e930-40bf-8eb2-a96a257e0af3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 86049abe-0570-404a-aefc-4996d50646b1 default }" containerID=5c5dfb742418c5d11a1b99512a81e121649715e017f1ed950ccb333e707760ac datapathConfiguration="&{false false false false false }" interface=lxcd50d20def11b k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c5dfb7424 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c5dfb7424 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5c5dfb7424 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c5dfb7424 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 identity=6954 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c5dfb7424 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 identity=6954 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c5dfb7424 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=758 identity=6954 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c5dfb7424 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=758 identity=6954 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.190 055c4f4c-2634-4535-b31e-8b4369183370 default }" containerID=e7d1e7cede86b5e958ca446d6a3bcbdf98ffaecc47a4c4a3a21d5994528b5dfd datapathConfiguration="&{false false false false false }" interface=lxc39c86bf925e3 k8sPodName=openstack/keystone-api-744446845f-gr267 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7d1e7cede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-api-744446845f-gr267 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7d1e7cede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-api-744446845f-gr267 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7d1e7cede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identity=4960 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-api-744446845f-gr267 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7d1e7cede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identity=4960 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-api-744446845f-gr267 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.82 12b62f76-256f-4f3e-a076-7d6a69169f42 default }" containerID=82f1e09bbbfcae0817e64ec51e67c66b5e0e72d5a43ec9b5069cf5e22947bab1 datapathConfiguration="&{false false false false false }" interface=lxcebbf27d8a68a k8sPodName=openstack/keystone-credential-setup-5rsm7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82f1e09bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-5rsm7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82f1e09bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d625b834-8f76-40ff-8a93-857562046856,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=d625b834-8f76-40ff-8a93-857562046856,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-5rsm7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d625b834-8f76-40ff-8a93-857562046856;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=d625b834-8f76-40ff-8a93-857562046856;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82f1e09bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 identity=9233 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d625b834-8f76-40ff-8a93-857562046856,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=d625b834-8f76-40ff-8a93-857562046856,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-5rsm7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82f1e09bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 identity=9233 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-5rsm7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7d1e7cede datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=896 identity=4960 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-api-744446845f-gr267 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7d1e7cede datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=896 identity=4960 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-api-744446845f-gr267 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=82f1e09bbb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=78 identity=9233 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-5rsm7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=82f1e09bbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=78 identity=9233 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-5rsm7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=82f1e09bbb endpointID=78 k8sNamespace=openstack k8sPodName=keystone-credential-setup-5rsm7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d625b834-8f76-40ff-8a93-857562046856 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=d625b834-8f76-40ff-8a93-857562046856 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=82f1e09bbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=78 identity=9233 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-5rsm7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 aa14960f-b5d8-48f1-a42e-d697a64760a4 default }" containerID=2fc26c7fadb0d72d59d33c2de96ab0ce2d16f206b10ecae33b4a22aecd5701eb datapathConfiguration="&{false false false false false }" interface=lxc2a83ab95e080 k8sPodName=openstack/keystone-db-init-wztt8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fc26c7fad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3175 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-db-init-wztt8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fc26c7fad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3175 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=106c7644-6a25-4ed5-94e4-728cac2a668d,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=106c7644-6a25-4ed5-94e4-728cac2a668d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-db-init-wztt8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=106c7644-6a25-4ed5-94e4-728cac2a668d;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=106c7644-6a25-4ed5-94e4-728cac2a668d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fc26c7fad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3175 identity=34455 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=106c7644-6a25-4ed5-94e4-728cac2a668d,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=106c7644-6a25-4ed5-94e4-728cac2a668d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-db-init-wztt8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fc26c7fad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3175 identity=34455 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-db-init-wztt8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2fc26c7fad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3175 identity=34455 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-db-init-wztt8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fc26c7fad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3175 identity=34455 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-db-init-wztt8 subsys=daemon level=info msg="Delete endpoint request" containerID=2fc26c7fad endpointID=3175 k8sNamespace=openstack k8sPodName=keystone-db-init-wztt8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=106c7644-6a25-4ed5-94e4-728cac2a668d k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=106c7644-6a25-4ed5-94e4-728cac2a668d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2fc26c7fad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3175 identity=34455 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-db-init-wztt8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 6d697cb5-843b-47c0-83e1-d8e05579fbb7 default }" containerID=c7d6a88df9bc59874cce5e7ab1223f63216db8f63de7e535d50d4be324c13054 datapathConfiguration="&{false false false false false }" interface=lxcd20cb7d87a4d k8sPodName=openstack/keystone-fernet-setup-8w9kj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7d6a88df9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-8w9kj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7d6a88df9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b6b8f1e0-7def-4cf2-b49e-af316c666784,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=b6b8f1e0-7def-4cf2-b49e-af316c666784,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-8w9kj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b6b8f1e0-7def-4cf2-b49e-af316c666784;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=b6b8f1e0-7def-4cf2-b49e-af316c666784;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7d6a88df9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identity=1026 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b6b8f1e0-7def-4cf2-b49e-af316c666784,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=b6b8f1e0-7def-4cf2-b49e-af316c666784,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-8w9kj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7d6a88df9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identity=1026 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-8w9kj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c7d6a88df9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=419 identity=1026 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-8w9kj subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7d6a88df9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=419 identity=1026 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-8w9kj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c7d6a88df9 endpointID=419 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-8w9kj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b6b8f1e0-7def-4cf2-b49e-af316c666784 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=b6b8f1e0-7def-4cf2-b49e-af316c666784 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c7d6a88df9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=419 identity=1026 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-8w9kj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 71de9591-98f4-43f4-9d41-d26159f8fa6f default }" containerID=f8ed43031a77a7df784f3579523d5ef6a9d2930db1554e1f5f81acc28baf5f61 datapathConfiguration="&{false false false false false }" interface=lxc9e1c76f713c1 k8sPodName=openstack/keystone-db-sync-2d2gt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8ed43031a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-db-sync-2d2gt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8ed43031a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9ff834b6-5c88-4ce3-b8bb-a43892589c55,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=9ff834b6-5c88-4ce3-b8bb-a43892589c55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-db-sync-2d2gt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9ff834b6-5c88-4ce3-b8bb-a43892589c55;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=9ff834b6-5c88-4ce3-b8bb-a43892589c55;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f8ed43031a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identity=59372 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9ff834b6-5c88-4ce3-b8bb-a43892589c55,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=9ff834b6-5c88-4ce3-b8bb-a43892589c55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-db-sync-2d2gt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8ed43031a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identity=59372 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-db-sync-2d2gt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8ed43031a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=183 identity=59372 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-db-sync-2d2gt subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8ed43031a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=183 identity=59372 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-db-sync-2d2gt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f8ed43031a endpointID=183 k8sNamespace=openstack k8sPodName=keystone-db-sync-2d2gt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9ff834b6-5c88-4ce3-b8bb-a43892589c55 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=9ff834b6-5c88-4ce3-b8bb-a43892589c55 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f8ed43031a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=183 identity=59372 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-db-sync-2d2gt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 b4506816-e13b-42b2-b9ea-d18b0e0e8b60 default }" containerID=cb982262452a37fbdb2bec4f5fe4263e09f997843aed7b3ebc2e26621ef400e3 datapathConfiguration="&{false false false false false }" interface=lxc6b5ca80242f2 k8sPodName=openstack/keystone-rabbit-init-jxt5h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb98226245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2287 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-rabbit-init-jxt5h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb98226245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2287 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7a2dce49-9429-4f83-b05d-f2c4585cecc3,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7a2dce49-9429-4f83-b05d-f2c4585cecc3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-rabbit-init-jxt5h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7a2dce49-9429-4f83-b05d-f2c4585cecc3;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7a2dce49-9429-4f83-b05d-f2c4585cecc3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb98226245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2287 identity=21394 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7a2dce49-9429-4f83-b05d-f2c4585cecc3,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7a2dce49-9429-4f83-b05d-f2c4585cecc3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-rabbit-init-jxt5h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb98226245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2287 identity=21394 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-rabbit-init-jxt5h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb98226245 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2287 identity=21394 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-rabbit-init-jxt5h subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb98226245 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2287 identity=21394 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-rabbit-init-jxt5h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cb98226245 endpointID=2287 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-jxt5h subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7a2dce49-9429-4f83-b05d-f2c4585cecc3 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7a2dce49-9429-4f83-b05d-f2c4585cecc3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cb98226245 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2287 identity=21394 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-rabbit-init-jxt5h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 bd9b76fe-618c-4f99-b482-d68b4c0d4cc5 default }" containerID=d6bfe69eba90a6ae3403d226c78db65d614ea323c654bab1b9fafc266f3314a5 datapathConfiguration="&{false false false false false }" interface=lxc360d7e69eef6 k8sPodName=openstack/keystone-domain-manage-km2db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6bfe69eba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-domain-manage-km2db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6bfe69eba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1b5df972-9de3-475e-8e9e-3dd444f47318,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=1b5df972-9de3-475e-8e9e-3dd444f47318,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-domain-manage-km2db subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1b5df972-9de3-475e-8e9e-3dd444f47318;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=1b5df972-9de3-475e-8e9e-3dd444f47318;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d6bfe69eba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=22030 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1b5df972-9de3-475e-8e9e-3dd444f47318,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=1b5df972-9de3-475e-8e9e-3dd444f47318,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-domain-manage-km2db oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6bfe69eba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=22030 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-domain-manage-km2db subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6bfe69eba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=281 identity=22030 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-domain-manage-km2db subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6bfe69eba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=281 identity=22030 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-domain-manage-km2db subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d6bfe69eba endpointID=281 k8sNamespace=openstack k8sPodName=keystone-domain-manage-km2db subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1b5df972-9de3-475e-8e9e-3dd444f47318 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=1b5df972-9de3-475e-8e9e-3dd444f47318 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d6bfe69eba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=281 identity=22030 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-domain-manage-km2db subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 4053f531-873b-4964-a870-5fb8d3a13334 default }" containerID=0ad915a9aa3ccdd71d72a093d6650beae2e5c50668511691cb24a6176ad703bd datapathConfiguration="&{false false false false false }" interface=lxc16c00e916e7c k8sPodName=openstack/keystone-bootstrap-2drlq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ad915a9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-bootstrap-2drlq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ad915a9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=49c87f36-c8d5-4fe4-b30d-b9cd2a571aa1,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=49c87f36-c8d5-4fe4-b30d-b9cd2a571aa1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-bootstrap-2drlq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0ad915a9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-bootstrap-2drlq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=49c87f36-c8d5-4fe4-b30d-b9cd2a571aa1;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=49c87f36-c8d5-4fe4-b30d-b9cd2a571aa1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ad915a9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identity=12687 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=49c87f36-c8d5-4fe4-b30d-b9cd2a571aa1,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=49c87f36-c8d5-4fe4-b30d-b9cd2a571aa1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-bootstrap-2drlq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ad915a9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identity=12687 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-bootstrap-2drlq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ad915a9aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=525 identity=12687 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-bootstrap-2drlq subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ad915a9aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=525 identity=12687 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-bootstrap-2drlq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ad915a9aa endpointID=525 k8sNamespace=openstack k8sPodName=keystone-bootstrap-2drlq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=49c87f36-c8d5-4fe4-b30d-b9cd2a571aa1 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=49c87f36-c8d5-4fe4-b30d-b9cd2a571aa1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0ad915a9aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=525 identity=12687 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-bootstrap-2drlq subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03424323995292654 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.146 abd61436-7d66-44e1-ad66-a15f3e09927a default }" containerID=9f01fc105300fede00539d429da0676b9cdf45e28ec98ea975d80db0cfeb7dca datapathConfiguration="&{false false false false false }" interface=lxc0540316fc1af k8sPodName=local-path-storage/helper-pod-create-pvc-04c6fef2-22af-45fc-8d4c-f0d6b505a5db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f01fc1053 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04c6fef2-22af-45fc-8d4c-f0d6b505a5db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f01fc1053 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04c6fef2-22af-45fc-8d4c-f0d6b505a5db subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f01fc1053 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identity=55820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04c6fef2-22af-45fc-8d4c-f0d6b505a5db oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f01fc1053 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identity=55820 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04c6fef2-22af-45fc-8d4c-f0d6b505a5db subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f01fc1053 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=44 identity=55820 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04c6fef2-22af-45fc-8d4c-f0d6b505a5db subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f01fc1053 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=44 identity=55820 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04c6fef2-22af-45fc-8d4c-f0d6b505a5db subsys=daemon level=info msg="Delete endpoint request" containerID=9f01fc1053 endpointID=44 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-04c6fef2-22af-45fc-8d4c-f0d6b505a5db subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9f01fc1053 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=44 identity=55820 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04c6fef2-22af-45fc-8d4c-f0d6b505a5db subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 a82a74ba-d62f-411e-99ee-f8781fd8e5cc default }" containerID=bb88276ddc1524d7147e769ac25166c1f6f8a76d14aecfa958de622a79ee2985 datapathConfiguration="&{false false false false false }" interface=lxc5c8193863b1b k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb88276ddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2547 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb88276ddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2547 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb88276ddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2547 identity=34834 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bb88276ddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2547 identity=34834 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb88276ddc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2547 identity=34834 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb88276ddc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2547 identity=34834 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 22924c98-5e5e-4389-aec4-df77f5936289 default }" containerID=91513aa9e838fafdded8e1a59c73fd37c0d7809e51c8d5f54328b009333c033e datapathConfiguration="&{false false false false false }" interface=lxc957dacd1b374 k8sPodName=openstack/barbican-api-54c454fd85-px8fp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91513aa9e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-54c454fd85-px8fp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91513aa9e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-54c454fd85-px8fp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91513aa9e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=4040 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-54c454fd85-px8fp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91513aa9e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=4040 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-54c454fd85-px8fp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 12f84e3d-2567-41bf-a4d4-61985ee71752 default }" containerID=06727b1ff910d7096f621b4745383c1fd34c82fbf61d890332608eaed0f56493 datapathConfiguration="&{false false false false false }" interface=lxcb2c37f20f7fa k8sPodName=openstack/barbican-db-init-jtmc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06727b1ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-init-jtmc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06727b1ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cda54ec0-9d57-4057-891f-501f787791bc,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=cda54ec0-9d57-4057-891f-501f787791bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-init-jtmc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=cda54ec0-9d57-4057-891f-501f787791bc;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=cda54ec0-9d57-4057-891f-501f787791bc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06727b1ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 identity=4179 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cda54ec0-9d57-4057-891f-501f787791bc,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=cda54ec0-9d57-4057-891f-501f787791bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-init-jtmc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06727b1ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 identity=4179 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-init-jtmc8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=91513aa9e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1068 identity=4040 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-54c454fd85-px8fp subsys=endpoint level=info msg="Successful endpoint creation" containerID=91513aa9e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1068 identity=4040 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-54c454fd85-px8fp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=06727b1ff9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3778 identity=4179 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-init-jtmc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=06727b1ff9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3778 identity=4179 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-init-jtmc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=06727b1ff9 endpointID=3778 k8sNamespace=openstack k8sPodName=barbican-db-init-jtmc8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=cda54ec0-9d57-4057-891f-501f787791bc k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=cda54ec0-9d57-4057-891f-501f787791bc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=06727b1ff9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3778 identity=4179 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-init-jtmc8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 c427caf0-eb83-4fa3-b185-5ef6a927513d default }" containerID=165bbe6b9ae471bd96610e8128009725fceb69eda2f5f7a73fd52d2feb6b9408 datapathConfiguration="&{false false false false false }" interface=lxce8b9f63dec59 k8sPodName=openstack/barbican-db-sync-2gvbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=165bbe6b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-db-sync-2gvbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=165bbe6b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=58ab4465-0ec5-43bd-b2f6-b60f1470f58e,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=58ab4465-0ec5-43bd-b2f6-b60f1470f58e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-db-sync-2gvbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=58ab4465-0ec5-43bd-b2f6-b60f1470f58e;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=58ab4465-0ec5-43bd-b2f6-b60f1470f58e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=165bbe6b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identity=41123 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=58ab4465-0ec5-43bd-b2f6-b60f1470f58e,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=58ab4465-0ec5-43bd-b2f6-b60f1470f58e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-db-sync-2gvbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=165bbe6b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identity=41123 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-db-sync-2gvbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=165bbe6b9a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2707 identity=41123 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-db-sync-2gvbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=165bbe6b9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2707 identity=41123 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-db-sync-2gvbb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=165bbe6b9a endpointID=2707 k8sNamespace=openstack k8sPodName=barbican-db-sync-2gvbb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=58ab4465-0ec5-43bd-b2f6-b60f1470f58e k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=58ab4465-0ec5-43bd-b2f6-b60f1470f58e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=165bbe6b9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2707 identity=41123 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-db-sync-2gvbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 5774cabc-68da-4af7-a0d9-9bbd7ff18de2 default }" containerID=ee0c0ac783e701f05e24b8226065c88f8db6f3223c8012af7a1f79187db8a7c9 datapathConfiguration="&{false false false false false }" interface=lxc89d5667c5f81 k8sPodName=openstack/barbican-rabbit-init-l8h7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee0c0ac783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2002 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-rabbit-init-l8h7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee0c0ac783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2002 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fffe5a9b-77cc-4fbd-916b-d90adb8c8951,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fffe5a9b-77cc-4fbd-916b-d90adb8c8951,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-rabbit-init-l8h7d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=fffe5a9b-77cc-4fbd-916b-d90adb8c8951;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=fffe5a9b-77cc-4fbd-916b-d90adb8c8951;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee0c0ac783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2002 identity=24826 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fffe5a9b-77cc-4fbd-916b-d90adb8c8951,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fffe5a9b-77cc-4fbd-916b-d90adb8c8951,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-rabbit-init-l8h7d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ee0c0ac783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2002 identity=24826 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-rabbit-init-l8h7d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee0c0ac783 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2002 identity=24826 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-rabbit-init-l8h7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee0c0ac783 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2002 identity=24826 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-rabbit-init-l8h7d subsys=daemon level=info msg="Delete endpoint request" containerID=ee0c0ac783 endpointID=2002 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-l8h7d subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=fffe5a9b-77cc-4fbd-916b-d90adb8c8951 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=fffe5a9b-77cc-4fbd-916b-d90adb8c8951 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ee0c0ac783 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2002 identity=24826 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/barbican-rabbit-init-l8h7d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 a371bfc5-84ed-4b1b-9693-bd323e472f94 default }" containerID=2c28e2778acae0d1c564c429d18d6a3f54b72f1dfed38caad825f3a15c94176f datapathConfiguration="&{false false false false false }" interface=lxc113c29e601ba k8sPodName=openstack/barbican-ks-service-njcdp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c28e2778a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-service-njcdp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c28e2778a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=55915b42-809c-42e9-b59c-f5fc83c0b506,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=55915b42-809c-42e9-b59c-f5fc83c0b506,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-service-njcdp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=55915b42-809c-42e9-b59c-f5fc83c0b506;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=55915b42-809c-42e9-b59c-f5fc83c0b506;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2c28e2778a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-service-njcdp line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2c28e2778a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identity=25621 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=55915b42-809c-42e9-b59c-f5fc83c0b506,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=55915b42-809c-42e9-b59c-f5fc83c0b506,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-service-njcdp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c28e2778a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identity=25621 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-service-njcdp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c28e2778a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3142 identity=25621 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-service-njcdp subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c28e2778a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3142 identity=25621 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-service-njcdp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2c28e2778a endpointID=3142 k8sNamespace=openstack k8sPodName=barbican-ks-service-njcdp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=55915b42-809c-42e9-b59c-f5fc83c0b506 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=55915b42-809c-42e9-b59c-f5fc83c0b506 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2c28e2778a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3142 identity=25621 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-service-njcdp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 21ec1381-74da-4001-b322-7e468a36e3a7 default }" containerID=6d44b212c9ec4776af2cbf98b2360ad2b7177060c409dd14dd92468813051a78 datapathConfiguration="&{false false false false false }" interface=lxc8043181e0ed5 k8sPodName=openstack/barbican-ks-endpoints-qjczl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d44b212c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qjczl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d44b212c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0aa19d7c-1f71-4b3d-8abe-6c29b55696e4,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0aa19d7c-1f71-4b3d-8abe-6c29b55696e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qjczl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0aa19d7c-1f71-4b3d-8abe-6c29b55696e4;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0aa19d7c-1f71-4b3d-8abe-6c29b55696e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d44b212c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identity=7846 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0aa19d7c-1f71-4b3d-8abe-6c29b55696e4,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0aa19d7c-1f71-4b3d-8abe-6c29b55696e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qjczl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6d44b212c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identity=7846 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qjczl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d44b212c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=975 identity=7846 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qjczl subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d44b212c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=975 identity=7846 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qjczl subsys=daemon level=info msg="Delete endpoint request" containerID=6d44b212c9 endpointID=975 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-qjczl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0aa19d7c-1f71-4b3d-8abe-6c29b55696e4 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0aa19d7c-1f71-4b3d-8abe-6c29b55696e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6d44b212c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=975 identity=7846 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qjczl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 9c046583-2aca-4b67-84fb-54122ee94a05 default }" containerID=9a6124f7c447b990d03cbaa3ef2fc547c97f5dc9fea234fac30b70223c97c36d datapathConfiguration="&{false false false false false }" interface=lxce36f3b56682d k8sPodName=openstack/barbican-ks-user-6rz4x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a6124f7c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-user-6rz4x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a6124f7c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e99fa524-6381-41a4-866c-1db291c4a245,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=e99fa524-6381-41a4-866c-1db291c4a245,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-user-6rz4x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e99fa524-6381-41a4-866c-1db291c4a245;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=e99fa524-6381-41a4-866c-1db291c4a245;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9a6124f7c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-user-6rz4x line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9a6124f7c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=14079 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e99fa524-6381-41a4-866c-1db291c4a245,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=e99fa524-6381-41a4-866c-1db291c4a245,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-user-6rz4x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a6124f7c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=14079 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-user-6rz4x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a6124f7c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=967 identity=14079 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-user-6rz4x subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a6124f7c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=967 identity=14079 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-user-6rz4x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9a6124f7c4 endpointID=967 k8sNamespace=openstack k8sPodName=barbican-ks-user-6rz4x subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e99fa524-6381-41a4-866c-1db291c4a245 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=e99fa524-6381-41a4-866c-1db291c4a245 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9a6124f7c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=967 identity=14079 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-user-6rz4x subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.122 9cc17ea0-3cec-4c36-8764-037884e426d4 default }" containerID=40debc18c77a08e282abd5ba2df56677cd426d8a53cd6f67c461b39866c22d2a datapathConfiguration="&{false false false false false }" interface=lxc17c06caac0fa k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-ldgwz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40debc18c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 ipv4=10.0.0.122 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-ldgwz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40debc18c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.122 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-ldgwz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40debc18c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 identity=33075 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.122 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-ldgwz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=40debc18c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 identity=33075 ipv4=10.0.0.122 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-ldgwz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40debc18c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2019 identity=33075 ipv4=10.0.0.122 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-ldgwz subsys=endpoint level=info msg="Successful endpoint creation" containerID=40debc18c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2019 identity=33075 ipv4=10.0.0.122 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-ldgwz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.46 a161ce22-22d3-4298-b5a7-bb7e47053d2f default }" containerID=61bc1e973ba19615a6382bbb5d8ebb5f195018977a16223092b6c770dfbbc197 datapathConfiguration="&{false false false false false }" interface=lxc0cd72195decf k8sPodName=openstack/rook-ceph-detect-version-z5tlt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61bc1e973b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-detect-version-z5tlt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61bc1e973b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=ca1c48c0-8e55-4d12-ad20-f8d27702eb43,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=ca1c48c0-8e55-4d12-ad20-f8d27702eb43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-detect-version-z5tlt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=ca1c48c0-8e55-4d12-ad20-f8d27702eb43;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=ca1c48c0-8e55-4d12-ad20-f8d27702eb43;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61bc1e973b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identity=55652 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=ca1c48c0-8e55-4d12-ad20-f8d27702eb43,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=ca1c48c0-8e55-4d12-ad20-f8d27702eb43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-detect-version-z5tlt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61bc1e973b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identity=55652 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-detect-version-z5tlt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=61bc1e973b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1109 identity=55652 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-detect-version-z5tlt subsys=endpoint level=info msg="Successful endpoint creation" containerID=61bc1e973b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1109 identity=55652 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-detect-version-z5tlt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=61bc1e973b endpointID=1109 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-z5tlt subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=ca1c48c0-8e55-4d12-ad20-f8d27702eb43 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=ca1c48c0-8e55-4d12-ad20-f8d27702eb43 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=61bc1e973b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1109 identity=55652 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-detect-version-z5tlt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 419270b2-6107-45c1-8ab9-e31ef630f93f default }" containerID=f710fd31bcda223ded61e63138e767eac490836f2b08737471bb3c4304a22aed datapathConfiguration="&{false false false false false }" interface=lxcf7b2a16fd908 k8sPodName=openstack/ceph-object-controller-detect-version-b7q9g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f710fd31bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-b7q9g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f710fd31bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fed4e654-5441-4b7d-a63c-a84a93f5fe3d,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fed4e654-5441-4b7d-a63c-a84a93f5fe3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-b7q9g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=fed4e654-5441-4b7d-a63c-a84a93f5fe3d;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=fed4e654-5441-4b7d-a63c-a84a93f5fe3d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f710fd31bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identity=42752 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fed4e654-5441-4b7d-a63c-a84a93f5fe3d,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fed4e654-5441-4b7d-a63c-a84a93f5fe3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-b7q9g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f710fd31bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identity=42752 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-b7q9g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f710fd31bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1933 identity=42752 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-b7q9g subsys=endpoint level=info msg="Successful endpoint creation" containerID=f710fd31bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1933 identity=42752 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-b7q9g subsys=daemon level=info msg="Delete endpoint request" containerID=f710fd31bc endpointID=1933 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-b7q9g subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=fed4e654-5441-4b7d-a63c-a84a93f5fe3d k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=fed4e654-5441-4b7d-a63c-a84a93f5fe3d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=f710fd31bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1933 identity=42752 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-b7q9g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 d259b56a-00de-435c-825e-bc76a3491270 default }" containerID=44142665218fe9a2fa580fb24648ecedc036b7db4212d73d79053ebc9bf1e504 datapathConfiguration="&{false false false false false }" interface=lxca97c05c71531 k8sPodName=local-path-storage/helper-pod-create-pvc-d93f13ff-402d-443d-bc8a-06d84809008c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4414266521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3312 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d93f13ff-402d-443d-bc8a-06d84809008c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4414266521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3312 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d93f13ff-402d-443d-bc8a-06d84809008c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4414266521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3312 identity=55820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d93f13ff-402d-443d-bc8a-06d84809008c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4414266521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3312 identity=55820 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d93f13ff-402d-443d-bc8a-06d84809008c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4414266521 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3312 identity=55820 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d93f13ff-402d-443d-bc8a-06d84809008c subsys=endpoint level=info msg="Successful endpoint creation" containerID=4414266521 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3312 identity=55820 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d93f13ff-402d-443d-bc8a-06d84809008c subsys=daemon level=info msg="Delete endpoint request" containerID=4414266521 endpointID=3312 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d93f13ff-402d-443d-bc8a-06d84809008c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4414266521 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3312 identity=55820 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d93f13ff-402d-443d-bc8a-06d84809008c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 e9777467-beae-4b7d-8f61-f88c66aec60a default }" containerID=29d01e020eeb8cdbe21691a1c95c22f4edbb025f08656de7562a714f9f37b37d datapathConfiguration="&{false false false false false }" interface=lxcfb3e461188b9 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29d01e020e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29d01e020e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29d01e020e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 identity=7587 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29d01e020e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 identity=7587 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=29d01e020e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2170 identity=7587 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=29d01e020e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2170 identity=7587 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.99 985b065a-a8e4-4043-8b94-89ded3d1d88f default }" containerID=6e0cb14dc046231efbd19762262273e5b17411dc9ef03a0b16a5a7de79c75e6e datapathConfiguration="&{false false false false false }" interface=lxc6d8785fdc3be k8sPodName=openstack/glance-db-init-26g9n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e0cb14dc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-db-init-26g9n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e0cb14dc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4cac33b9-8534-4d0b-a651-9dbb09afaba6,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=4cac33b9-8534-4d0b-a651-9dbb09afaba6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-db-init-26g9n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4cac33b9-8534-4d0b-a651-9dbb09afaba6;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=4cac33b9-8534-4d0b-a651-9dbb09afaba6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e0cb14dc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=7929 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4cac33b9-8534-4d0b-a651-9dbb09afaba6,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=4cac33b9-8534-4d0b-a651-9dbb09afaba6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-db-init-26g9n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e0cb14dc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=7929 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-db-init-26g9n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6e0cb14dc0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=663 identity=7929 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-db-init-26g9n subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e0cb14dc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=663 identity=7929 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-db-init-26g9n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.152 9f428a77-ba37-4659-b57b-9a7e76e5a840 default }" containerID=96fd291651c744e08cf4d471cf835a214fc3dd08eb9712f8cfe3ad3adde61629 datapathConfiguration="&{false false false false false }" interface=lxcfbf5854f4f8b k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-qm25b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96fd291651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-qm25b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96fd291651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-qm25b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96fd291651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 identity=10200 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-qm25b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96fd291651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 identity=10200 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-qm25b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 14dd2df7-a4b1-48a7-a78e-adf6df5b4fc8 default }" containerID=4ae483d6d9a32c98b742f04c146deaae0a039139a471af8b188945a66c6ba51e datapathConfiguration="&{false false false false false }" interface=lxcd5e2176e5131 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-56v5c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ae483d6d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-56v5c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ae483d6d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-56v5c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ae483d6d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identity=40583 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-56v5c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ae483d6d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identity=40583 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-56v5c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96fd291651 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1164 identity=10200 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-qm25b subsys=endpoint level=info msg="Successful endpoint creation" containerID=96fd291651 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1164 identity=10200 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-qm25b subsys=daemon level=info msg="Delete endpoint request" containerID=6e0cb14dc0 endpointID=663 k8sNamespace=openstack k8sPodName=glance-db-init-26g9n subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4cac33b9-8534-4d0b-a651-9dbb09afaba6 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=4cac33b9-8534-4d0b-a651-9dbb09afaba6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Rewrote endpoint BPF program" containerID=4ae483d6d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2216 identity=40583 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-56v5c subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ae483d6d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2216 identity=40583 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-56v5c subsys=daemon level=info msg="Removed endpoint" containerID=6e0cb14dc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=663 identity=7929 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-db-init-26g9n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 abf150e2-01a3-4350-bdca-a4b6bf7efce2 default }" containerID=5c3813924a240ad954ff11af250bbc5278ceb834b2bb7fa0866765f19e9b776b datapathConfiguration="&{false false false false false }" interface=lxcd640af45b513 k8sPodName=openstack/glance-db-sync-8wr5p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c3813924a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-sync-8wr5p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c3813924a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4596c476-b017-4aaa-852b-481b4bb39a35,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=4596c476-b017-4aaa-852b-481b4bb39a35,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-sync-8wr5p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4596c476-b017-4aaa-852b-481b4bb39a35;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=4596c476-b017-4aaa-852b-481b4bb39a35;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c3813924a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=35133 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4596c476-b017-4aaa-852b-481b4bb39a35,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=4596c476-b017-4aaa-852b-481b4bb39a35,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-sync-8wr5p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c3813924a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=35133 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-sync-8wr5p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c3813924a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1094 identity=35133 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-sync-8wr5p subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c3813924a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1094 identity=35133 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-sync-8wr5p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5c3813924a endpointID=1094 k8sNamespace=openstack k8sPodName=glance-db-sync-8wr5p subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4596c476-b017-4aaa-852b-481b4bb39a35 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=4596c476-b017-4aaa-852b-481b4bb39a35 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5c3813924a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1094 identity=35133 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-sync-8wr5p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 73029d64-a9de-4325-9a93-6eb42f360c71 default }" containerID=76a7139f47c93bed5a9c2d285a20a72192695279b3d1430c463471af01915e8f datapathConfiguration="&{false false false false false }" interface=lxc1a1bdec55081 k8sPodName=openstack/glance-rabbit-init-msdjm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76a7139f47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-rabbit-init-msdjm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76a7139f47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0e53d5d8-291f-4744-b5cf-dc7e6383e52e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0e53d5d8-291f-4744-b5cf-dc7e6383e52e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-rabbit-init-msdjm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0e53d5d8-291f-4744-b5cf-dc7e6383e52e;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0e53d5d8-291f-4744-b5cf-dc7e6383e52e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76a7139f47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=32193 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0e53d5d8-291f-4744-b5cf-dc7e6383e52e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0e53d5d8-291f-4744-b5cf-dc7e6383e52e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-rabbit-init-msdjm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76a7139f47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=32193 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-rabbit-init-msdjm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=76a7139f47 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=35 identity=32193 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-rabbit-init-msdjm subsys=endpoint level=info msg="Successful endpoint creation" containerID=76a7139f47 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=32193 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-rabbit-init-msdjm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=76a7139f47 endpointID=35 k8sNamespace=openstack k8sPodName=glance-rabbit-init-msdjm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0e53d5d8-291f-4744-b5cf-dc7e6383e52e k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0e53d5d8-291f-4744-b5cf-dc7e6383e52e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=76a7139f47 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=32193 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-rabbit-init-msdjm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 ffa36352-6c6c-413b-8852-c4df87f3ca19 default }" containerID=2ad42c48af832f7f068ae17f072daceca1f1646e54b7f10bda587726476eef85 datapathConfiguration="&{false false false false false }" interface=lxcdb82b0cfa817 k8sPodName=openstack/glance-ks-service-jjqfz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ad42c48af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-service-jjqfz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ad42c48af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8de6b632-bdb2-44aa-8df3-78b61f4941c1,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=8de6b632-bdb2-44aa-8df3-78b61f4941c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-service-jjqfz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2ad42c48af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-service-jjqfz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8de6b632-bdb2-44aa-8df3-78b61f4941c1;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=8de6b632-bdb2-44aa-8df3-78b61f4941c1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ad42c48af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=6472 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8de6b632-bdb2-44aa-8df3-78b61f4941c1,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=8de6b632-bdb2-44aa-8df3-78b61f4941c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-service-jjqfz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ad42c48af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=6472 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-service-jjqfz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ad42c48af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=690 identity=6472 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-service-jjqfz subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ad42c48af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=690 identity=6472 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-service-jjqfz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2ad42c48af endpointID=690 k8sNamespace=openstack k8sPodName=glance-ks-service-jjqfz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8de6b632-bdb2-44aa-8df3-78b61f4941c1 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=8de6b632-bdb2-44aa-8df3-78b61f4941c1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2ad42c48af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=690 identity=6472 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-service-jjqfz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 cddc13fa-d320-4b6e-895f-600a2d38232d default }" containerID=3383ca571e291092052719f3c39a1d71a606904b5ae7cc254cc6f2c3ebc27a39 datapathConfiguration="&{false false false false false }" interface=lxca07673ff1895 k8sPodName=openstack/glance-ks-endpoints-4k2cx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3383ca571e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4087 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-endpoints-4k2cx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3383ca571e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4087 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0545bf7f-f4f0-4eb6-8fad-cb46ca3ec27c,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0545bf7f-f4f0-4eb6-8fad-cb46ca3ec27c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-endpoints-4k2cx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0545bf7f-f4f0-4eb6-8fad-cb46ca3ec27c;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0545bf7f-f4f0-4eb6-8fad-cb46ca3ec27c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3383ca571e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4087 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-endpoints-4k2cx line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3383ca571e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4087 identity=14990 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0545bf7f-f4f0-4eb6-8fad-cb46ca3ec27c,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0545bf7f-f4f0-4eb6-8fad-cb46ca3ec27c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-endpoints-4k2cx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3383ca571e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4087 identity=14990 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-endpoints-4k2cx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3383ca571e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4087 identity=14990 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-endpoints-4k2cx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3383ca571e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4087 identity=14990 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-endpoints-4k2cx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3383ca571e endpointID=4087 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-4k2cx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0545bf7f-f4f0-4eb6-8fad-cb46ca3ec27c k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0545bf7f-f4f0-4eb6-8fad-cb46ca3ec27c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3383ca571e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4087 identity=14990 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-endpoints-4k2cx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 f1051fda-4701-4aa8-a193-2a3dc8efbf00 default }" containerID=3753435f58a726535165d6d627135d63e0676f21364cec5877f3762a81c0a17f datapathConfiguration="&{false false false false false }" interface=lxcbfe629101f41 k8sPodName=openstack/glance-ks-user-8njkn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3753435f58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-ks-user-8njkn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3753435f58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c955a081-8116-498c-b92f-69b459d2abd7,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=c955a081-8116-498c-b92f-69b459d2abd7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-ks-user-8njkn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c955a081-8116-498c-b92f-69b459d2abd7;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=c955a081-8116-498c-b92f-69b459d2abd7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3753435f58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identity=54776 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c955a081-8116-498c-b92f-69b459d2abd7,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=c955a081-8116-498c-b92f-69b459d2abd7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-ks-user-8njkn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3753435f58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identity=54776 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-ks-user-8njkn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3753435f58 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2545 identity=54776 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-ks-user-8njkn subsys=endpoint level=info msg="Successful endpoint creation" containerID=3753435f58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2545 identity=54776 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-ks-user-8njkn subsys=daemon level=info msg="Delete endpoint request" containerID=3753435f58 endpointID=2545 k8sNamespace=openstack k8sPodName=glance-ks-user-8njkn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c955a081-8116-498c-b92f-69b459d2abd7 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=c955a081-8116-498c-b92f-69b459d2abd7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3753435f58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2545 identity=54776 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-ks-user-8njkn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 fa480225-1eb9-4e37-bc04-d6061ae83287 default }" containerID=12a4939bc91e645126426062474974261f55bacfae7fb36687882bda52c4bef6 datapathConfiguration="&{false false false false false }" interface=lxc42a406bddf50 k8sPodName=openstack/glance-metadefs-load-jlms8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12a4939bc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-metadefs-load-jlms8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12a4939bc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=916e0734-bbdc-4d8f-9c80-cef16004f3eb,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=916e0734-bbdc-4d8f-9c80-cef16004f3eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-metadefs-load-jlms8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=916e0734-bbdc-4d8f-9c80-cef16004f3eb;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=916e0734-bbdc-4d8f-9c80-cef16004f3eb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12a4939bc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identity=3777 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=916e0734-bbdc-4d8f-9c80-cef16004f3eb,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=916e0734-bbdc-4d8f-9c80-cef16004f3eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-metadefs-load-jlms8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=12a4939bc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identity=3777 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-metadefs-load-jlms8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12a4939bc9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=875 identity=3777 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-metadefs-load-jlms8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=12a4939bc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=875 identity=3777 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-metadefs-load-jlms8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=12a4939bc9 endpointID=875 k8sNamespace=openstack k8sPodName=glance-metadefs-load-jlms8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=916e0734-bbdc-4d8f-9c80-cef16004f3eb k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=916e0734-bbdc-4d8f-9c80-cef16004f3eb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=12a4939bc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=875 identity=3777 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-metadefs-load-jlms8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 10c22106-d9ee-4bf8-b6b5-24079c322e7b default }" containerID=00553c1381b5fffb460c939311f8079dfce32e6f3c67a85c2b380224491c5263 datapathConfiguration="&{false false false false false }" interface=lxcc243897dd4da k8sPodName=openstack/glance-storage-init-qrdpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00553c1381 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3433 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-storage-init-qrdpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00553c1381 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3433 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=44a9dafa-db90-4c8d-a290-fc046af22b36,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=44a9dafa-db90-4c8d-a290-fc046af22b36,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-storage-init-qrdpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=44a9dafa-db90-4c8d-a290-fc046af22b36;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=44a9dafa-db90-4c8d-a290-fc046af22b36;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00553c1381 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3433 identity=44872 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=44a9dafa-db90-4c8d-a290-fc046af22b36,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=44a9dafa-db90-4c8d-a290-fc046af22b36,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-storage-init-qrdpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00553c1381 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3433 identity=44872 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-storage-init-qrdpv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=00553c1381 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3433 identity=44872 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-storage-init-qrdpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=00553c1381 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3433 identity=44872 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-storage-init-qrdpv subsys=daemon level=info msg="Delete endpoint request" containerID=00553c1381 endpointID=3433 k8sNamespace=openstack k8sPodName=glance-storage-init-qrdpv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=44a9dafa-db90-4c8d-a290-fc046af22b36 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=44a9dafa-db90-4c8d-a290-fc046af22b36 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=00553c1381 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3433 identity=44872 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-storage-init-qrdpv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 f1341b4b-f0ff-4dad-87e7-968a5faf0518 default }" containerID=6f4167dab86d541d6b4722f91faa297b031f1dee89b33e3c84c19045b8e7a044 datapathConfiguration="&{false false false false false }" interface=lxc03258976481c k8sPodName=openstack/glance-api-7b98bd4fb7-vdrwr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f4167dab8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-7b98bd4fb7-vdrwr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f4167dab8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-7b98bd4fb7-vdrwr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f4167dab8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identity=17516 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-7b98bd4fb7-vdrwr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f4167dab8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identity=17516 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-7b98bd4fb7-vdrwr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6f4167dab8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3090 identity=17516 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-7b98bd4fb7-vdrwr subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f4167dab8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3090 identity=17516 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-7b98bd4fb7-vdrwr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.178 0b31b173-ff9b-4bef-952f-006338c53133 default }" containerID=ca253b1cafb0b094c416f7d07a10ee375fbead8b573a9b139abca3c82548b584 datapathConfiguration="&{false false false false false }" interface=lxc65b969f6f2e2 k8sPodName=openstack/staffeln-api-67bfd484c7-lgbfm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca253b1caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-api-67bfd484c7-lgbfm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca253b1caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-api-67bfd484c7-lgbfm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca253b1caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identity=7296 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-api-67bfd484c7-lgbfm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca253b1caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identity=7296 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-api-67bfd484c7-lgbfm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 c4c66afc-a0c7-461f-87e4-26f6eaf400d6 default }" containerID=45e8ddeaab97ff6dc211633e4d9217383599925d04a25221aacfb649e7ed5d65 datapathConfiguration="&{false false false false false }" interface=lxca0071c2fe2a3 k8sPodName=openstack/staffeln-conductor-9d4f96cf8-qbns6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45e8ddeaab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/staffeln-conductor-9d4f96cf8-qbns6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45e8ddeaab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/staffeln-conductor-9d4f96cf8-qbns6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45e8ddeaab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identity=33065 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/staffeln-conductor-9d4f96cf8-qbns6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45e8ddeaab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identity=33065 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/staffeln-conductor-9d4f96cf8-qbns6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 27f021e1-3507-4d89-92bd-6f9bb15f184f default }" containerID=65d33d0bf107cfdaecccc88aa8368ad3346ed2ddde6ad691f3bece12ba67c0ee datapathConfiguration="&{false false false false false }" interface=lxca2de52675e60 k8sPodName=openstack/staffeln-db-init-wctzr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65d33d0bf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-init-wctzr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65d33d0bf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=3532acd9-d095-47fe-af85-0865f95c3e38,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=3532acd9-d095-47fe-af85-0865f95c3e38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-init-wctzr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=3532acd9-d095-47fe-af85-0865f95c3e38;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=3532acd9-d095-47fe-af85-0865f95c3e38;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65d33d0bf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identity=43311 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=3532acd9-d095-47fe-af85-0865f95c3e38,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=3532acd9-d095-47fe-af85-0865f95c3e38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-init-wctzr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65d33d0bf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identity=43311 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-init-wctzr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca253b1caf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2373 identity=7296 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-api-67bfd484c7-lgbfm subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca253b1caf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2373 identity=7296 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-api-67bfd484c7-lgbfm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=45e8ddeaab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3941 identity=33065 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/staffeln-conductor-9d4f96cf8-qbns6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45e8ddeaab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3941 identity=33065 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/staffeln-conductor-9d4f96cf8-qbns6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=65d33d0bf1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=379 identity=43311 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-init-wctzr subsys=endpoint level=info msg="Successful endpoint creation" containerID=65d33d0bf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=379 identity=43311 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-init-wctzr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65d33d0bf1 endpointID=379 k8sNamespace=openstack k8sPodName=staffeln-db-init-wctzr subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=3532acd9-d095-47fe-af85-0865f95c3e38 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=3532acd9-d095-47fe-af85-0865f95c3e38 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=65d33d0bf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=379 identity=43311 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-init-wctzr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 54cb7afd-a33a-4339-b05e-6b9923faaf87 default }" containerID=79f8bfca5d17bcb084326b754ae2fef8c33238cf25eec8c8b79ea5ea1ffb1f5c datapathConfiguration="&{false false false false false }" interface=lxc645d4a428191 k8sPodName=openstack/staffeln-db-sync-qpgrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79f8bfca5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-sync-qpgrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79f8bfca5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=092e391a-60e6-4ad0-a111-e891cd3a00dc,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=092e391a-60e6-4ad0-a111-e891cd3a00dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-sync-qpgrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=092e391a-60e6-4ad0-a111-e891cd3a00dc;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=092e391a-60e6-4ad0-a111-e891cd3a00dc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79f8bfca5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=61029 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=092e391a-60e6-4ad0-a111-e891cd3a00dc,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=092e391a-60e6-4ad0-a111-e891cd3a00dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-sync-qpgrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79f8bfca5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=61029 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-sync-qpgrj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79f8bfca5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=29 identity=61029 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-sync-qpgrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=79f8bfca5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=29 identity=61029 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-sync-qpgrj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager