level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.176474ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="49.521µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="835.424µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.69µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=93.501125ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.44µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="16.16µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="72.702µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="69.191µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="83.822µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="440.283µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.73µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.820832ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.222298ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="32.911µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="72.252µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="270.627µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="165.385µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="74.013µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=45.890554ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="106.603µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.122.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.333599ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="12.811µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.635451ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.05µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.415996ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.91µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.82µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.53µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.66µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="33.061µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="20.91µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="59.432µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="256.738µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.02µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.11µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="221.177µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="747.751µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.346128ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.86µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="20.19µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.122 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.122 ipAddr.ipv6="" k8sNodeIP=199.19.213.122 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.122" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.40" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.122" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.122} {CiliumInternalIP 10.0.0.40}] 10.0.0.0/24 [] [] 10.0.0.51 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40951" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=3.079794578s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="30.391µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="17.771µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="103.993µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="37.421µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=4.117787598s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=308.569365ms file-path=/var/run/cilium/state/templates/c11e8573674cc6216ce844a99044625d6f4f2264d395f7264ad61f3c9e9f6c8f/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2622 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 2ae6803c-50ab-46eb-b548-39597710be61 default }" containerID=5912e4dc68711597092ca72021341fc75470fcc3201879461428d607a04ed651 datapathConfiguration="&{false false false false false }" interface=lxc17560300bcd1 k8sPodName=kube-system/coredns-7c96b6546b-hthwg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5912e4dc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4000 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hthwg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5912e4dc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4000 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hthwg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.41 d925938a-884c-4b2a-a10b-be369d3c0f9b default }" containerID=e4ddd264e097e19b30750be5abb2416845195918f4a71dbf21145b551adb58f3 datapathConfiguration="&{false false false false false }" interface=lxc883c1fd7bfa2 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-m2hzm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4ddd264e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 ipv4=10.0.0.41 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-m2hzm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4ddd264e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=5d48ea9c-f91b-4bd2-942d-137442923f2c,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=5d48ea9c-f91b-4bd2-942d-137442923f2c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.41 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-m2hzm subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=5912e4dc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4000 identity=37453 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hthwg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e4ddd264e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.41 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-m2hzm line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5912e4dc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4000 identity=37453 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hthwg subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=5d48ea9c-f91b-4bd2-942d-137442923f2c;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=5d48ea9c-f91b-4bd2-942d-137442923f2c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4ddd264e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 identity=10824 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=5d48ea9c-f91b-4bd2-942d-137442923f2c,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=5d48ea9c-f91b-4bd2-942d-137442923f2c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.41 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-m2hzm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4ddd264e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 identity=10824 ipv4=10.0.0.41 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-m2hzm subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 ipv4=10.0.0.51 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 identityLabels="reserved:health" ipv4=10.0.0.51 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 identity=4 identityLabels="reserved:health" ipv4=10.0.0.51 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.085944832s file-path=/var/run/cilium/state/templates/f1a8845be0675e620bb48baf07f68dd72e103d84dd729d7fe8ecfef61b9e6425/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=5912e4dc68 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4000 identity=37453 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hthwg subsys=endpoint level=info msg="Successful endpoint creation" containerID=5912e4dc68 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4000 identity=37453 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hthwg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2404 identity=4 ipv4=10.0.0.51 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4ddd264e0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2280 identity=10824 ipv4=10.0.0.41 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-m2hzm subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4ddd264e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2280 identity=10824 ipv4=10.0.0.41 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-m2hzm subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e4ddd264e0 endpointID=2280 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-m2hzm subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=5d48ea9c-f91b-4bd2-942d-137442923f2c k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=5d48ea9c-f91b-4bd2-942d-137442923f2c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=e4ddd264e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2280 identity=10824 ipv4=10.0.0.41 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-m2hzm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 d5a7cddb-f2f9-4647-ac84-c7422435be05 default }" containerID=18c99c6355b7a2f60d0ac2b0c1e5c07eaeb70a027594f89ba0e884739db7144a datapathConfiguration="&{false false false false false }" interface=lxc8a0e43e7bbd8 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tnlpm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18c99c6355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 ipv4=10.0.0.38 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tnlpm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18c99c6355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.38 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tnlpm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18c99c6355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identity=21997 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.38 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tnlpm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=18c99c6355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identity=21997 ipv4=10.0.0.38 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tnlpm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18c99c6355 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2298 identity=21997 ipv4=10.0.0.38 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tnlpm subsys=endpoint level=info msg="Successful endpoint creation" containerID=18c99c6355 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2298 identity=21997 ipv4=10.0.0.38 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tnlpm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2622 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02622 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02622 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02622 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02622:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2622 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 4e25c285-c329-40b4-89b3-dea729100734 default }" containerID=c63a15d1bb2d600a7723add1eb1eb5e00c8ffc43ed16c6794d376419762ef4de datapathConfiguration="&{false false false false false }" interface=lxc4ad476113413 k8sPodName=kube-system/coredns-67659f764b-c4fv2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c63a15d1bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3815 ipv4=10.0.0.140 ipv6= k8sPodName=kube-system/coredns-67659f764b-c4fv2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c63a15d1bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3815 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.140 ipv6= k8sPodName=kube-system/coredns-67659f764b-c4fv2 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c63a15d1bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3815 identity=37453 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.140 ipv6= k8sPodName=kube-system/coredns-67659f764b-c4fv2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c63a15d1bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3815 identity=37453 ipv4=10.0.0.140 ipv6= k8sPodName=kube-system/coredns-67659f764b-c4fv2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 3d7b65b7-4cea-4b6c-b58a-25479e09680a default }" containerID=874d450f7cfbbdab095c640e73bca1072368a58f08093f13cba2d096666702a4 datapathConfiguration="&{false false false false false }" interface=lxc0a75a593d44a k8sPodName=kube-system/coredns-67659f764b-cq7vr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=874d450f7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-cq7vr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=874d450f7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-cq7vr subsys=endpoint level=info msg="Identity of endpoint changed" containerID=874d450f7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identity=37453 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-cq7vr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=874d450f7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identity=37453 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-cq7vr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=874d450f7c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1655 identity=37453 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-cq7vr subsys=endpoint level=info msg="Successful endpoint creation" containerID=874d450f7c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1655 identity=37453 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-67659f764b-cq7vr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c63a15d1bb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3815 identity=37453 ipv4=10.0.0.140 ipv6= k8sPodName=kube-system/coredns-67659f764b-c4fv2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c63a15d1bb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3815 identity=37453 ipv4=10.0.0.140 ipv6= k8sPodName=kube-system/coredns-67659f764b-c4fv2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.118 dff89077-fcca-4c70-a844-364bcda16214 default }" containerID=033df2b2d038c5cc7c32bed6d76e10067dcb75c29969ce0fb5a65bb7822026c9 datapathConfiguration="&{false false false false false }" interface=lxc8b338469de8f k8sPodName=local-path-storage/local-path-provisioner-679c578f5-sbvsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=033df2b2d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-sbvsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=033df2b2d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-sbvsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=033df2b2d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identity=17455 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-sbvsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=033df2b2d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identity=17455 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-sbvsz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=033df2b2d0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=183 identity=17455 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-sbvsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=033df2b2d0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=183 identity=17455 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-sbvsz subsys=daemon level=info msg="Delete endpoint request" containerID=5912e4dc68 endpointID=4000 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-hthwg subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=5912e4dc68 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4000 identity=37453 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-hthwg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 82d82f0b-183c-4170-a1aa-e7e89580b62d default }" containerID=a5d92a9c0ee012e33c0cba40daa0b48bc1821e7e5c64ec3fb9e012414877cfae datapathConfiguration="&{false false false false false }" interface=lxc1ebb4a122d8e k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gbssb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5d92a9c0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1404 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gbssb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5d92a9c0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1404 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gbssb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5d92a9c0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1404 identity=22811 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gbssb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5d92a9c0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1404 identity=22811 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gbssb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.26 c31b6a48-9b6e-4d11-8a9b-05f5fd70bbfb default }" containerID=3d29f6d9f49ddeb6f0c12d4da71a3e3edb7f221ad81e581fa96c0eb591e74b3b datapathConfiguration="&{false false false false false }" interface=lxcaffd5f8f3121 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qhtxx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d29f6d9f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qhtxx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d29f6d9f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qhtxx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d29f6d9f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=25041 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qhtxx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d29f6d9f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=25041 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qhtxx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 c489fd6e-402a-432f-9b1c-5dcce6308c58 default }" containerID=7526ba881cfba0f71e7b85b578165678c1193cbb6c2b9a9d8dbe6ad7f2e7baca datapathConfiguration="&{false false false false false }" interface=lxc88d466291305 k8sPodName=cert-manager/cert-manager-75c4c745bc-tmhf9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7526ba881c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tmhf9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7526ba881c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tmhf9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7526ba881c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=24371 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tmhf9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7526ba881c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=24371 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tmhf9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5d92a9c0e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1404 identity=22811 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gbssb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5d92a9c0e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1404 identity=22811 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gbssb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3d29f6d9f4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=31 identity=25041 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qhtxx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d29f6d9f4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=31 identity=25041 ipv4=10.0.0.26 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qhtxx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7526ba881c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=22 identity=24371 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tmhf9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7526ba881c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=22 identity=24371 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tmhf9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.41 fdba6178-343f-40e1-bb14-58e7a2ce348e default }" containerID=0b056208256e6de6f1a5fc3edcbe4743f8a510620a4b990100c8030ce1d0e973 datapathConfiguration="&{false false false false false }" interface=lxc294c9ce6a32b k8sPodName=cert-manager/cert-manager-startupapicheck-bf6b2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b05620825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bf6b2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b05620825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=466bb6f0-95a2-4ae8-8ba5-cd0f90498ed5,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=466bb6f0-95a2-4ae8-8ba5-cd0f90498ed5,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bf6b2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=466bb6f0-95a2-4ae8-8ba5-cd0f90498ed5;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=466bb6f0-95a2-4ae8-8ba5-cd0f90498ed5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b05620825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=18736 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=466bb6f0-95a2-4ae8-8ba5-cd0f90498ed5,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=466bb6f0-95a2-4ae8-8ba5-cd0f90498ed5,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bf6b2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b05620825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=18736 ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bf6b2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b05620825 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1830 identity=18736 ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bf6b2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b05620825 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1830 identity=18736 ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bf6b2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0b05620825 endpointID=1830 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-bf6b2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=466bb6f0-95a2-4ae8-8ba5-cd0f90498ed5 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=466bb6f0-95a2-4ae8-8ba5-cd0f90498ed5 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=0b05620825 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1830 identity=18736 ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bf6b2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 3d3a2407-a89c-4a9d-9260-c94964531226 default }" containerID=08545dee818fa429ad4f14fc18678fc86a972e4e4501abd67b02b818d06954a8 datapathConfiguration="&{false false false false false }" interface=lxcd731bb858f88 k8sPodName=ingress-nginx/ingress-nginx-admission-create-9w6cg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08545dee81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9w6cg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08545dee81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ab894441-7f75-4041-be29-d0a8d28660c9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=ab894441-7f75-4041-be29-d0a8d28660c9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9w6cg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=ab894441-7f75-4041-be29-d0a8d28660c9;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=ab894441-7f75-4041-be29-d0a8d28660c9;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08545dee81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identity=18230 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ab894441-7f75-4041-be29-d0a8d28660c9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=ab894441-7f75-4041-be29-d0a8d28660c9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9w6cg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08545dee81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identity=18230 ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9w6cg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=08545dee81 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3345 identity=18230 ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9w6cg subsys=endpoint level=info msg="Successful endpoint creation" containerID=08545dee81 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3345 identity=18230 ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9w6cg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=08545dee81 endpointID=3345 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-9w6cg subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=ab894441-7f75-4041-be29-d0a8d28660c9 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=ab894441-7f75-4041-be29-d0a8d28660c9 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=08545dee81 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3345 identity=18230 ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9w6cg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 13eab783-f85a-4b35-8b91-1f0efa0e9b76 default }" containerID=8d2e63d726785d02fc425df76fd111719000054dcca3b7c5607b9ff1e9abc6d4 datapathConfiguration="&{false false false false false }" interface=lxc87ef43b77e2e k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bt8zr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d2e63d726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1372 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bt8zr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d2e63d726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1372 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bt8zr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d2e63d726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1372 identity=5792 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bt8zr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d2e63d726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1372 identity=5792 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bt8zr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8d2e63d726 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1372 identity=5792 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bt8zr subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d2e63d726 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1372 identity=5792 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bt8zr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.164 d50100f7-b33e-4a80-af5d-625ad42de45e default }" containerID=7b29a800c17a0501ff48496ce1af0ae50b615a0c15cce966dc35190ab475d8cc datapathConfiguration="&{false false false false false }" interface=lxcbb5ef130e4a2 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4qqbx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b29a800c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4qqbx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b29a800c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3045c095-f357-461b-9cce-4262ca8683a0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3045c095-f357-461b-9cce-4262ca8683a0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4qqbx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=3045c095-f357-461b-9cce-4262ca8683a0;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=3045c095-f357-461b-9cce-4262ca8683a0;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b29a800c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 identity=62554 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3045c095-f357-461b-9cce-4262ca8683a0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3045c095-f357-461b-9cce-4262ca8683a0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4qqbx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b29a800c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 identity=62554 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4qqbx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b29a800c1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1614 identity=62554 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4qqbx subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b29a800c1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1614 identity=62554 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4qqbx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7b29a800c1 endpointID=1614 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-4qqbx subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=3045c095-f357-461b-9cce-4262ca8683a0 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=3045c095-f357-461b-9cce-4262ca8683a0 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=7b29a800c1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1614 identity=62554 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4qqbx subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=9ff4e6ec-8034-4a51-b5b4-159c4cddfc1f] Description:}]" policyAddRequest=84699553-59fa-4772-a7e1-7fc67d1c67cc subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=84699553-59fa-4772-a7e1-7fc67d1c67cc policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3d75cc09-100c-411c-8cac-75359fb0abc7] Description:}]" policyAddRequest=11678b9d-008b-4e1f-8506-5b05bd7d8867 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=11678b9d-008b-4e1f-8506-5b05bd7d8867 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 6a8f1551-9684-46a3-94c7-e6669d5d75fb default }" containerID=01cdaf541eec191b5a4065ca63224c6a2043c7a356ab68aa5f6df4505da67c22 datapathConfiguration="&{false false false false false }" interface=lxc8c069a094161 k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-x4cw9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01cdaf541e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-x4cw9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01cdaf541e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-x4cw9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01cdaf541e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=16597 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-x4cw9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01cdaf541e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=16597 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-x4cw9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=01cdaf541e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=24 identity=16597 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-x4cw9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=01cdaf541e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=24 identity=16597 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-x4cw9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.191 183571ef-b014-4d84-8d2d-4e44ddfde47a default }" containerID=7861ddcc61a9e859ce2427c7ae7963381d63c0298416db6ab3271ef4824e5ca1 datapathConfiguration="&{false false false false false }" interface=lxc97a6c4fc3249 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-k922v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7861ddcc61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4024 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-k922v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7861ddcc61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4024 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-k922v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7861ddcc61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4024 identity=23178 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-k922v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7861ddcc61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4024 identity=23178 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-k922v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7861ddcc61 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=4024 identity=23178 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-k922v subsys=endpoint level=info msg="Successful endpoint creation" containerID=7861ddcc61 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=4024 identity=23178 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-k922v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.22 687f3721-e227-4094-8aa1-a28d989be03b default }" containerID=dd112c794d16f752033b06a46ffbd70bda48ffca03c373d6a0dc6e210d721db5 datapathConfiguration="&{false false false false false }" interface=lxc0af1b2cb9983 k8sPodName=openstack/pxc-operator-7cff949c8b-kf7qv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd112c794d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-kf7qv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd112c794d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-kf7qv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dd112c794d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.22 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-kf7qv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd112c794d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identity=43117 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-kf7qv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd112c794d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identity=43117 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-kf7qv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd112c794d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=997 identity=43117 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-kf7qv subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd112c794d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=997 identity=43117 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-kf7qv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.206 9af54136-170a-4e50-ba44-010341e2d898 default }" containerID=43cca50e970f27b362a63bb03e05ec70e83be382596a0533fd285e48af06c977 datapathConfiguration="&{false false false false false }" interface=lxc73cd35430515 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43cca50e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43cca50e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43cca50e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 identity=7030 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43cca50e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 identity=7030 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43cca50e97 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=617 identity=7030 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=43cca50e97 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=617 identity=7030 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.64 3058df4d-b64e-4c66-b14e-a54ea3b92b8f default }" containerID=1507fdbb09cce66f62e484e96b26c338ead50112d7ec0b106cc8d412abe07cbc datapathConfiguration="&{false false false false false }" interface=lxc90467970e7e3 k8sPodName=local-path-storage/helper-pod-create-pvc-5f30b801-87b6-453b-b724-c323bd2f6219 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1507fdbb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f30b801-87b6-453b-b724-c323bd2f6219 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1507fdbb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f30b801-87b6-453b-b724-c323bd2f6219 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1507fdbb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identity=16741 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f30b801-87b6-453b-b724-c323bd2f6219 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1507fdbb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identity=16741 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f30b801-87b6-453b-b724-c323bd2f6219 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1507fdbb09 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=573 identity=16741 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f30b801-87b6-453b-b724-c323bd2f6219 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1507fdbb09 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=573 identity=16741 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f30b801-87b6-453b-b724-c323bd2f6219 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1507fdbb09 endpointID=573 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5f30b801-87b6-453b-b724-c323bd2f6219 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1507fdbb09 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=573 identity=16741 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f30b801-87b6-453b-b724-c323bd2f6219 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 c8604e0f-e3fb-407e-be54-43329c87f7fe default }" containerID=a267473438159acd489fbd4edb7db936249c30987810d83db32708e317b8de07 datapathConfiguration="&{false false false false false }" interface=lxc9605efee8c89 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a267473438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3971 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a267473438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3971 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a267473438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3971 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a267473438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3971 identity=41449 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a267473438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3971 identity=41449 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a267473438 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3971 identity=41449 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a267473438 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3971 identity=41449 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=50957a68-ea01-4be8-a79d-e17474da1461] Description:}]" policyAddRequest=a42a85c2-5e62-438f-9851-b4f130586432 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a42a85c2-5e62-438f-9851-b4f130586432 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.44 40d109eb-a0ea-4ab3-acc8-f718cce2ee73 default }" containerID=cc97a7a351604b0ebfa37bd6cc7dbe24d01530206b8d2cf858fbf556ff7d14c1 datapathConfiguration="&{false false false false false }" interface=lxcc1b41c2c5bd7 k8sPodName=local-path-storage/helper-pod-create-pvc-4c5b882a-33da-4a57-abb6-86db96e43398 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc97a7a351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1709 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c5b882a-33da-4a57-abb6-86db96e43398 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc97a7a351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1709 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c5b882a-33da-4a57-abb6-86db96e43398 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc97a7a351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1709 identity=16741 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c5b882a-33da-4a57-abb6-86db96e43398 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc97a7a351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1709 identity=16741 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c5b882a-33da-4a57-abb6-86db96e43398 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc97a7a351 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1709 identity=16741 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c5b882a-33da-4a57-abb6-86db96e43398 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc97a7a351 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1709 identity=16741 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c5b882a-33da-4a57-abb6-86db96e43398 subsys=daemon level=info msg="Delete endpoint request" containerID=cc97a7a351 endpointID=1709 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4c5b882a-33da-4a57-abb6-86db96e43398 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cc97a7a351 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1709 identity=16741 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c5b882a-33da-4a57-abb6-86db96e43398 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 48d16d8e-3cdc-4fcc-ae09-372c85c92a26 default }" containerID=3b5019d4572e5397b73efcdf72127ed83a2ad53ab72496eb76ef70ff6470941f datapathConfiguration="&{false false false false false }" interface=lxce486a22bc920 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b5019d457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2812 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b5019d457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2812 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b5019d457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2812 identity=29618 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b5019d457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2812 identity=29618 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3b5019d457 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2812 identity=29618 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b5019d457 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2812 identity=29618 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=adee0f48-e00e-44cf-bd27-d902817b9407] Description:}]" policyAddRequest=33cda099-2351-4236-aa4d-c084672562d3 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=33cda099-2351-4236-aa4d-c084672562d3 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.156 6fcea9c2-8484-4d23-97d4-8284ec9f7d5e default }" containerID=ee06d7f2cf7a932ceced23c4f9941c5278d5f68142a8f16b5b6e55b2bea160fc datapathConfiguration="&{false false false false false }" interface=lxcf4b2a69ee73c k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee06d7f2cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 ipv4=10.0.0.156 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee06d7f2cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.156 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ee06d7f2cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.156 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee06d7f2cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=678 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.156 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee06d7f2cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=678 ipv4=10.0.0.156 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee06d7f2cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=740 identity=678 ipv4=10.0.0.156 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee06d7f2cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=740 identity=678 ipv4=10.0.0.156 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010821486060573269 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.137 0f70b422-fa90-439f-a2c7-b9197a436da1 default }" containerID=5365343753bfbc7c076b17194cf71ee2f77ec472455c8d1bffc04c279a89c31e datapathConfiguration="&{false false false false false }" interface=lxc2d6504de00fe k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-b5zft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5365343753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=766 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-b5zft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5365343753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=766 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-b5zft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5365343753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=766 identity=35571 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-b5zft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5365343753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=766 identity=35571 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-b5zft subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5365343753 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=766 identity=35571 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-b5zft subsys=endpoint level=info msg="Successful endpoint creation" containerID=5365343753 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=766 identity=35571 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-b5zft subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.166 1dd2978c-b5b5-4a37-b8e3-f5f94218e177 default }" containerID=1899ef0400cf6a60060bcd693c287318e219c5f09cbc1f2f9c4c046c593ac758 datapathConfiguration="&{false false false false false }" interface=lxcac5a1cfa3e35 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wkkh8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1899ef0400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1238 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wkkh8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1899ef0400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1238 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wkkh8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.109 c4f79a1b-67d4-496a-bd42-105504206fb6 default }" containerID=56765eb35f4411b924d2e7bad0976f8b717a54734c5120c60ae3635989002d6c datapathConfiguration="&{false false false false false }" interface=lxc4d54a1bb4c78 k8sPodName=monitoring/node-feature-discovery-worker-s5glx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56765eb35f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3554 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s5glx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56765eb35f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3554 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s5glx subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=1899ef0400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1238 identity=34684 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wkkh8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1899ef0400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1238 identity=34684 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wkkh8 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56765eb35f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3554 identity=24216 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s5glx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56765eb35f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3554 identity=24216 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s5glx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1899ef0400 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1238 identity=34684 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wkkh8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1899ef0400 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1238 identity=34684 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wkkh8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=56765eb35f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3554 identity=24216 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s5glx subsys=endpoint level=info msg="Successful endpoint creation" containerID=56765eb35f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3554 identity=24216 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s5glx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 6f26603a-dcbe-4e54-bcaa-44e272dba327 default }" containerID=f80410572c3b4bcdca4aba84872a49a750a346745def3306ef03aa0b3d8bb0c6 datapathConfiguration="&{false false false false false }" interface=lxc42f93e663911 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j8tnn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f80410572c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 ipv4=10.0.0.188 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j8tnn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f80410572c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.188 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j8tnn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f80410572c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 identity=2465 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.188 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j8tnn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f80410572c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 identity=2465 ipv4=10.0.0.188 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j8tnn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f80410572c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=188 identity=2465 ipv4=10.0.0.188 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j8tnn subsys=endpoint level=info msg="Successful endpoint creation" containerID=f80410572c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=188 identity=2465 ipv4=10.0.0.188 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j8tnn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2622 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02622 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02622 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02622 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02622:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2622 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 4172ad3c-d55c-4c9e-b228-4548d17928e1 default }" containerID=d27b5897f0fa983e094235f7bcdcc86e0c3d9384d199c6e79030497bd6d4e26a datapathConfiguration="&{false false false false false }" interface=lxc5baf7ee442fb k8sPodName=monitoring/kube-prometheus-stack-admission-create-b4m6d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d27b5897f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b4m6d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d27b5897f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=279835c7-2dcf-42eb-babd-5caf68322fd9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=279835c7-2dcf-42eb-babd-5caf68322fd9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b4m6d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=279835c7-2dcf-42eb-babd-5caf68322fd9;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=279835c7-2dcf-42eb-babd-5caf68322fd9;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d27b5897f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identity=58065 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=279835c7-2dcf-42eb-babd-5caf68322fd9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=279835c7-2dcf-42eb-babd-5caf68322fd9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b4m6d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d27b5897f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identity=58065 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b4m6d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d27b5897f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=582 identity=58065 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b4m6d subsys=endpoint level=info msg="Successful endpoint creation" containerID=d27b5897f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=582 identity=58065 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b4m6d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d27b5897f0 endpointID=582 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-b4m6d subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=279835c7-2dcf-42eb-babd-5caf68322fd9 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=279835c7-2dcf-42eb-babd-5caf68322fd9 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d27b5897f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=582 identity=58065 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b4m6d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 beeaede2-f2f1-47c1-8273-62389fa2e8c6 default }" containerID=e83bae99e791fe172691904f990438f9ed9612a810d49fa490e11277fb36e940 datapathConfiguration="&{false false false false false }" interface=lxc14305124d3c9 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-44zk9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e83bae99e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3919 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-44zk9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e83bae99e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3919 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-44zk9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e83bae99e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3919 identity=17312 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-44zk9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e83bae99e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3919 identity=17312 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-44zk9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e83bae99e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3919 identity=17312 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-44zk9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e83bae99e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3919 identity=17312 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-44zk9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.1 cc8b01e8-8355-48e3-bdf6-f8109716bc56 default }" containerID=6a19ac01b7bc33b9dfba537bfc1c7474f950811776af9b81cf738344dae9559d datapathConfiguration="&{false false false false false }" interface=lxc6ee81ddc3c4c k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n84jn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a19ac01b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1618 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n84jn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a19ac01b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1618 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n84jn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 25ad8a01-90a0-4047-9f8d-6b646119221b default }" containerID=1f61e0726d9cdb4068c551e0c0ba5cff3b1040f89887249edb52aedef9512f73 datapathConfiguration="&{false false false false false }" interface=lxc9fad5fee99d7 k8sPodName=monitoring/kube-prometheus-stack-grafana-665778b7c7-ccn6g labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=1f61e0726d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-665778b7c7-ccn6g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f61e0726d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-665778b7c7-ccn6g subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a19ac01b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1618 identity=36823 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n84jn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a19ac01b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1618 identity=36823 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n84jn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f61e0726d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identity=28229 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-665778b7c7-ccn6g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f61e0726d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identity=28229 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-665778b7c7-ccn6g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a19ac01b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1618 identity=36823 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n84jn subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a19ac01b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1618 identity=36823 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n84jn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1f61e0726d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1453 identity=28229 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-665778b7c7-ccn6g subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f61e0726d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1453 identity=28229 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-665778b7c7-ccn6g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.36 35efc133-8055-4d4a-8d32-1028c850395f default }" containerID=837c9cccc757c6a9e9e57c47fcdb40917a075e5e644850381a6de7137677ebf8 datapathConfiguration="&{false false false false false }" interface=lxc7027c5f1abd4 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k9l69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=837c9cccc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2262 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k9l69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=837c9cccc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2262 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=38b2ff7e-9567-4309-90b6-1f86c0e0aa09,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=38b2ff7e-9567-4309-90b6-1f86c0e0aa09,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k9l69 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=38b2ff7e-9567-4309-90b6-1f86c0e0aa09;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=38b2ff7e-9567-4309-90b6-1f86c0e0aa09;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=837c9cccc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2262 identity=52650 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=38b2ff7e-9567-4309-90b6-1f86c0e0aa09,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=38b2ff7e-9567-4309-90b6-1f86c0e0aa09,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k9l69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=837c9cccc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2262 identity=52650 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k9l69 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=837c9cccc7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2262 identity=52650 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k9l69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=837c9cccc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2262 identity=52650 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k9l69 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 2b2d1c21-d996-4097-bdbe-e519202ad09b default }" containerID=d7c2e2b138643d16ebc8fdbd93ea8c2034da97456e0a844edc464ecb60365d5c datapathConfiguration="&{false false false false false }" interface=lxccd82c70f5148 k8sPodName=local-path-storage/helper-pod-create-pvc-3dd0e677-43bc-4cc1-8ef3-1ab647e4f75e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7c2e2b138 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dd0e677-43bc-4cc1-8ef3-1ab647e4f75e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7c2e2b138 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dd0e677-43bc-4cc1-8ef3-1ab647e4f75e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7c2e2b138 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 identity=16741 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dd0e677-43bc-4cc1-8ef3-1ab647e4f75e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7c2e2b138 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 identity=16741 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dd0e677-43bc-4cc1-8ef3-1ab647e4f75e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7c2e2b138 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2218 identity=16741 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dd0e677-43bc-4cc1-8ef3-1ab647e4f75e subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7c2e2b138 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2218 identity=16741 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dd0e677-43bc-4cc1-8ef3-1ab647e4f75e subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.54 01f72702-3e05-4f08-88fe-cb0674c30037 default }" containerID=c4b102a1b1b33092b8f9007456027e94200a41bf28b5a314ff2f47c55fcb6a27 datapathConfiguration="&{false false false false false }" interface=lxcf338d4cd216f k8sPodName=local-path-storage/helper-pod-create-pvc-00fd51b2-fdb4-4f01-9376-1cdf9ec03ef1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4b102a1b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00fd51b2-fdb4-4f01-9376-1cdf9ec03ef1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4b102a1b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00fd51b2-fdb4-4f01-9376-1cdf9ec03ef1 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c4b102a1b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identity=16741 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00fd51b2-fdb4-4f01-9376-1cdf9ec03ef1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4b102a1b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identity=16741 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00fd51b2-fdb4-4f01-9376-1cdf9ec03ef1 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c4b102a1b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1126 identity=16741 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00fd51b2-fdb4-4f01-9376-1cdf9ec03ef1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4b102a1b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1126 identity=16741 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00fd51b2-fdb4-4f01-9376-1cdf9ec03ef1 subsys=daemon level=info msg="Delete endpoint request" containerID=837c9cccc7 endpointID=2262 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-k9l69 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=38b2ff7e-9567-4309-90b6-1f86c0e0aa09 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=38b2ff7e-9567-4309-90b6-1f86c0e0aa09 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=837c9cccc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2262 identity=52650 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k9l69 subsys=endpoint level=info msg="Delete endpoint request" containerID=d7c2e2b138 endpointID=2218 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3dd0e677-43bc-4cc1-8ef3-1ab647e4f75e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d7c2e2b138 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2218 identity=16741 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dd0e677-43bc-4cc1-8ef3-1ab647e4f75e subsys=endpoint level=info msg="Delete endpoint request" containerID=c4b102a1b1 endpointID=1126 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-00fd51b2-fdb4-4f01-9376-1cdf9ec03ef1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c4b102a1b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1126 identity=16741 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00fd51b2-fdb4-4f01-9376-1cdf9ec03ef1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 c58207b9-0e60-4825-b919-4a66883a6ad6 default }" containerID=5a65df4d9e4a7c2ff3bf2d8fa4a0c0a6fd010eb76b46569d9ef1b0dee199357a datapathConfiguration="&{false false false false false }" interface=lxc5fc79027efdf k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a65df4d9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a65df4d9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a65df4d9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 identity=36590 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5a65df4d9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 identity=36590 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a65df4d9e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3386 identity=36590 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a65df4d9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3386 identity=36590 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.10 d5c41a36-149f-498e-970e-819ac2871144 default }" containerID=53270c66539622177028831c19e60f634839226910a2966d004d5aad2af66027 datapathConfiguration="&{false false false false false }" interface=lxcb77f7af6adc6 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53270c6653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3356 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53270c6653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3356 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53270c6653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3356 identity=32132 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53270c6653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3356 identity=32132 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=53270c6653 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3356 identity=32132 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=53270c6653 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3356 identity=32132 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.250 972a185e-e1e9-447d-92ba-f0b7b71c5d61 default }" containerID=85cf7a62f98e4f90f3d98231b72de03230c712e8d553dc55246651eb062e91ba datapathConfiguration="&{false false false false false }" interface=lxc4a22586c48ca k8sPodName=monitoring/loki-gateway-cf54cb88c-rg5bv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85cf7a62f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rg5bv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85cf7a62f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rg5bv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85cf7a62f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=711 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rg5bv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85cf7a62f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=711 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rg5bv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 c14bbb47-89a9-4248-9bff-c588376ecd9d default }" containerID=9b0f07ed5e86fe9e4a67ba3d67c8539b1f54377d27a530b0b08049cffb6b1c48 datapathConfiguration="&{false false false false false }" interface=lxce2bd8b05cbcd k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b0f07ed5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b0f07ed5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.185 0398137c-67b9-42be-966e-362a44630c08 default }" containerID=c0eb62105d270c86b7039ce5c6582d334844fe9fcbf8f703cabdd3d96a9a0045 datapathConfiguration="&{false false false false false }" interface=lxc1b544b60643a k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0eb62105d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0eb62105d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b0f07ed5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identity=29735 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b0f07ed5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identity=29735 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0eb62105d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 identity=24687 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0eb62105d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 identity=24687 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85cf7a62f9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1830 identity=711 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rg5bv subsys=endpoint level=info msg="Successful endpoint creation" containerID=85cf7a62f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1830 identity=711 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rg5bv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9b0f07ed5e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1161 identity=29735 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b0f07ed5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1161 identity=29735 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c0eb62105d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=290 identity=24687 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0eb62105d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=290 identity=24687 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.28 a5984e4f-97c5-4f53-a902-1fb4be9bf0c3 default }" containerID=1e7f4e87873cbb7e63611fba4df670d69908200d09484e6d5c93a8b38e44572d datapathConfiguration="&{false false false false false }" interface=lxcf6e06c212cbd k8sPodName=local-path-storage/helper-pod-create-pvc-1e859fba-5ae2-4aff-ae91-b0db30761f52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e7f4e8787 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2112 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e859fba-5ae2-4aff-ae91-b0db30761f52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e7f4e8787 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e859fba-5ae2-4aff-ae91-b0db30761f52 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e7f4e8787 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2112 identity=16741 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e859fba-5ae2-4aff-ae91-b0db30761f52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e7f4e8787 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2112 identity=16741 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e859fba-5ae2-4aff-ae91-b0db30761f52 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1e7f4e8787 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2112 identity=16741 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e859fba-5ae2-4aff-ae91-b0db30761f52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e7f4e8787 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2112 identity=16741 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e859fba-5ae2-4aff-ae91-b0db30761f52 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.2 bfd29055-36d5-4e41-b912-4a3159f7e60d default }" containerID=a9dc29ef780f0c1843d8ca06d6108b61cbfbdd71b426e9fe20456d7daa308864 datapathConfiguration="&{false false false false false }" interface=lxcbca0f40119be k8sPodName=monitoring/vector-wqflt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9dc29ef78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4068 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/vector-wqflt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9dc29ef78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4068 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/vector-wqflt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9dc29ef78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4068 identity=53967 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/vector-wqflt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9dc29ef78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4068 identity=53967 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/vector-wqflt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9dc29ef78 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4068 identity=53967 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/vector-wqflt subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9dc29ef78 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4068 identity=53967 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/vector-wqflt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1e7f4e8787 endpointID=2112 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1e859fba-5ae2-4aff-ae91-b0db30761f52 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1e7f4e8787 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2112 identity=16741 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e859fba-5ae2-4aff-ae91-b0db30761f52 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 a0d34d6e-b1f0-4edf-95e4-cefae2323cc4 default }" containerID=0fb114b388b06042ad2e545f5c0fa558475a26aa8884a7a339a6871b1cb8da15 datapathConfiguration="&{false false false false false }" interface=lxcfc4b75abba45 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s4fld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fb114b388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s4fld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fb114b388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s4fld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0fb114b388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s4fld line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fb114b388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 identity=8994 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s4fld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fb114b388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 identity=8994 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s4fld subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0fb114b388 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2320 identity=8994 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s4fld subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fb114b388 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2320 identity=8994 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s4fld subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.136 1cee21f9-2a71-40c8-8a5e-fc3d955d6a44 default }" containerID=d8b37ca4fc59083314347d40e88ef86cc639c2690c719457bae4fdfc7b93c142 datapathConfiguration="&{false false false false false }" interface=lxc016600b5b5b3 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8b37ca4fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8b37ca4fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8b37ca4fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identity=29446 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8b37ca4fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identity=29446 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8b37ca4fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=686 identity=29446 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8b37ca4fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=686 identity=29446 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.25 8230f4c5-e142-4ed5-abe9-78f7639fadfc default }" containerID=0ccdc46541447e11ecf74acdc75e434764394999d687dca623ddde16bca199ab datapathConfiguration="&{false false false false false }" interface=lxc3a7609edc4f6 k8sPodName=openstack/memcached-memcached-6479589586-4swqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ccdc46541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4022 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4swqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ccdc46541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4022 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4swqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0ccdc46541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4022 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4swqb line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0ccdc46541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4022 identity=28468 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4swqb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ccdc46541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4022 identity=28468 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4swqb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ccdc46541 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4022 identity=28468 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4swqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ccdc46541 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4022 identity=28468 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4swqb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.4 98fc4c32-6770-401e-82c8-ad18cd756ba8 default }" containerID=bbd9847f42e5cade8f8bfed48ef9be1eec8d576e289c7486679d36c7a7507184 datapathConfiguration="&{false false false false false }" interface=lxc71947de68575 k8sPodName=local-path-storage/helper-pod-create-pvc-05a61d46-a5f3-4992-80ad-7e7cd5341c7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbd9847f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a61d46-a5f3-4992-80ad-7e7cd5341c7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbd9847f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a61d46-a5f3-4992-80ad-7e7cd5341c7f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bbd9847f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=16741 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a61d46-a5f3-4992-80ad-7e7cd5341c7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbd9847f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=16741 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a61d46-a5f3-4992-80ad-7e7cd5341c7f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bbd9847f42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=9 identity=16741 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a61d46-a5f3-4992-80ad-7e7cd5341c7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbd9847f42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=9 identity=16741 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a61d46-a5f3-4992-80ad-7e7cd5341c7f subsys=daemon level=info msg="Delete endpoint request" containerID=bbd9847f42 endpointID=9 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-05a61d46-a5f3-4992-80ad-7e7cd5341c7f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bbd9847f42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=9 identity=16741 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a61d46-a5f3-4992-80ad-7e7cd5341c7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 dfac3c98-d493-4b02-9f74-ac33dad64663 default }" containerID=23cc886677b4592675b2d0b05bf5fd69be06f9ace52e4b3ca41301406964bf51 datapathConfiguration="&{false false false false false }" interface=lxc4abb94cd8708 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23cc886677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1551 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23cc886677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1551 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=23cc886677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1551 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23cc886677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1551 identity=35379 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23cc886677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1551 identity=35379 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23cc886677 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1551 identity=35379 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=23cc886677 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1551 identity=35379 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.3 d8728d8f-de6b-400a-97d0-89f860b247e5 default }" containerID=55c07a6bfe78cb873ecb64b59cb2a6504666312707d0518e128f4c07e4881133 datapathConfiguration="&{false false false false false }" interface=lxc547c18269460 k8sPodName=openstack/keystone-api-546684985f-7xkvq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55c07a6bfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-api-546684985f-7xkvq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55c07a6bfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-api-546684985f-7xkvq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55c07a6bfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 identity=4947 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-api-546684985f-7xkvq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55c07a6bfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 identity=4947 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-api-546684985f-7xkvq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 fa065066-1394-4bf8-9593-cf3ac2a86a33 default }" containerID=f3eb68e6f2c906284336ecad830820f1e82bc88a12d11edb9dcd41bf5d55706d datapathConfiguration="&{false false false false false }" interface=lxc25b482b3c61b k8sPodName=openstack/keystone-credential-setup-f2qw2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3eb68e6f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3471 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-credential-setup-f2qw2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3eb68e6f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3471 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=571ab3fe-0b37-4c51-ad65-b173dada8796,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=571ab3fe-0b37-4c51-ad65-b173dada8796,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-credential-setup-f2qw2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=571ab3fe-0b37-4c51-ad65-b173dada8796;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=571ab3fe-0b37-4c51-ad65-b173dada8796;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3eb68e6f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3471 identity=8465 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=571ab3fe-0b37-4c51-ad65-b173dada8796,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=571ab3fe-0b37-4c51-ad65-b173dada8796,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-credential-setup-f2qw2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3eb68e6f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3471 identity=8465 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-credential-setup-f2qw2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55c07a6bfe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1335 identity=4947 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-api-546684985f-7xkvq subsys=endpoint level=info msg="Successful endpoint creation" containerID=55c07a6bfe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1335 identity=4947 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-api-546684985f-7xkvq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f3eb68e6f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3471 identity=8465 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-credential-setup-f2qw2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3eb68e6f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3471 identity=8465 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-credential-setup-f2qw2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f3eb68e6f2 endpointID=3471 k8sNamespace=openstack k8sPodName=keystone-credential-setup-f2qw2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=571ab3fe-0b37-4c51-ad65-b173dada8796 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=571ab3fe-0b37-4c51-ad65-b173dada8796 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f3eb68e6f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3471 identity=8465 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-credential-setup-f2qw2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 e5ba2f7e-9204-4d00-999e-29885943034e default }" containerID=c72bb35bba1f5295df8ee7c1efecb78f5cc5a964dce375cc21627b3cbe8f3537 datapathConfiguration="&{false false false false false }" interface=lxc048dc33b2b0b k8sPodName=openstack/keystone-db-init-sqxxv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c72bb35bba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2566 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-db-init-sqxxv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c72bb35bba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2566 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8460f158-30d8-4da3-ae07-5e8f0672234b,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=8460f158-30d8-4da3-ae07-5e8f0672234b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-db-init-sqxxv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8460f158-30d8-4da3-ae07-5e8f0672234b;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=8460f158-30d8-4da3-ae07-5e8f0672234b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c72bb35bba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2566 identity=7216 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8460f158-30d8-4da3-ae07-5e8f0672234b,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=8460f158-30d8-4da3-ae07-5e8f0672234b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-db-init-sqxxv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c72bb35bba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2566 identity=7216 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-db-init-sqxxv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c72bb35bba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2566 identity=7216 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-db-init-sqxxv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c72bb35bba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2566 identity=7216 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-db-init-sqxxv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c72bb35bba endpointID=2566 k8sNamespace=openstack k8sPodName=keystone-db-init-sqxxv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8460f158-30d8-4da3-ae07-5e8f0672234b k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=8460f158-30d8-4da3-ae07-5e8f0672234b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c72bb35bba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2566 identity=7216 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-db-init-sqxxv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 24451c77-1c2a-4fa8-aa78-b5aa9f61afc9 default }" containerID=120d38f489a3990a2d67d1b134c481de816a380baa9b64924eed967f18c7b002 datapathConfiguration="&{false false false false false }" interface=lxc9c3947682474 k8sPodName=openstack/keystone-fernet-setup-2llcx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=120d38f489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-fernet-setup-2llcx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=120d38f489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ad35b574-bc82-4f2a-bbfa-1d6e6dca95f2,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=ad35b574-bc82-4f2a-bbfa-1d6e6dca95f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-fernet-setup-2llcx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ad35b574-bc82-4f2a-bbfa-1d6e6dca95f2;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=ad35b574-bc82-4f2a-bbfa-1d6e6dca95f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=120d38f489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identity=13922 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ad35b574-bc82-4f2a-bbfa-1d6e6dca95f2,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=ad35b574-bc82-4f2a-bbfa-1d6e6dca95f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-fernet-setup-2llcx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=120d38f489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identity=13922 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-fernet-setup-2llcx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=120d38f489 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2428 identity=13922 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-fernet-setup-2llcx subsys=endpoint level=info msg="Successful endpoint creation" containerID=120d38f489 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2428 identity=13922 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-fernet-setup-2llcx subsys=daemon level=info msg="Delete endpoint request" containerID=120d38f489 endpointID=2428 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-2llcx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ad35b574-bc82-4f2a-bbfa-1d6e6dca95f2 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=ad35b574-bc82-4f2a-bbfa-1d6e6dca95f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=120d38f489 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2428 identity=13922 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-fernet-setup-2llcx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 92a2c7ed-4ba4-4479-8d08-529e8270047f default }" containerID=e40be3924a142c29ed1b78ebde7dc0ba5cdc2fcae69ab7eb660baa4a3e329e6b datapathConfiguration="&{false false false false false }" interface=lxc2fa0e67c6f9f k8sPodName=openstack/keystone-db-sync-mvfrl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e40be3924a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2701 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-db-sync-mvfrl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e40be3924a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2701 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3c76db54-66bf-4f0a-834d-379bf35949a3,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=3c76db54-66bf-4f0a-834d-379bf35949a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-db-sync-mvfrl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3c76db54-66bf-4f0a-834d-379bf35949a3;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=3c76db54-66bf-4f0a-834d-379bf35949a3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e40be3924a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2701 identity=11558 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3c76db54-66bf-4f0a-834d-379bf35949a3,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=3c76db54-66bf-4f0a-834d-379bf35949a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-db-sync-mvfrl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e40be3924a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2701 identity=11558 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-db-sync-mvfrl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e40be3924a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2701 identity=11558 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-db-sync-mvfrl subsys=endpoint level=info msg="Successful endpoint creation" containerID=e40be3924a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2701 identity=11558 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-db-sync-mvfrl subsys=daemon level=info msg="Delete endpoint request" containerID=e40be3924a endpointID=2701 k8sNamespace=openstack k8sPodName=keystone-db-sync-mvfrl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3c76db54-66bf-4f0a-834d-379bf35949a3 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=3c76db54-66bf-4f0a-834d-379bf35949a3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e40be3924a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2701 identity=11558 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-db-sync-mvfrl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 60b4f3eb-127e-45d7-ba0b-2a057ea27cc4 default }" containerID=d96b63f75b888f6a6659b7c4376a2d89d305d4ee61cf85c0186ceef030c9e274 datapathConfiguration="&{false false false false false }" interface=lxc55503cd61df6 k8sPodName=openstack/keystone-rabbit-init-kg45q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d96b63f75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1325 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-kg45q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d96b63f75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1325 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fcc3e2fb-e3ee-4360-9fb5-28f00e9fb6b8,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fcc3e2fb-e3ee-4360-9fb5-28f00e9fb6b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-kg45q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fcc3e2fb-e3ee-4360-9fb5-28f00e9fb6b8;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=fcc3e2fb-e3ee-4360-9fb5-28f00e9fb6b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d96b63f75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1325 identity=9719 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fcc3e2fb-e3ee-4360-9fb5-28f00e9fb6b8,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fcc3e2fb-e3ee-4360-9fb5-28f00e9fb6b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-kg45q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d96b63f75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1325 identity=9719 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-kg45q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d96b63f75b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1325 identity=9719 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-kg45q subsys=endpoint level=info msg="Successful endpoint creation" containerID=d96b63f75b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1325 identity=9719 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-kg45q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d96b63f75b endpointID=1325 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-kg45q subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fcc3e2fb-e3ee-4360-9fb5-28f00e9fb6b8 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=fcc3e2fb-e3ee-4360-9fb5-28f00e9fb6b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d96b63f75b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1325 identity=9719 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-kg45q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 74cd7fcd-f48b-4efc-a6b2-15bcf63eea00 default }" containerID=47bd9d9882904fce4eb6dbd69bcc381f012e3bed90b53c7525f0094f1c6818cf datapathConfiguration="&{false false false false false }" interface=lxcfe05b5284033 k8sPodName=openstack/keystone-domain-manage-s2bhd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47bd9d9882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-domain-manage-s2bhd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47bd9d9882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=492da992-d050-4087-a609-f6bdaf9d7fdc,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=492da992-d050-4087-a609-f6bdaf9d7fdc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-domain-manage-s2bhd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=492da992-d050-4087-a609-f6bdaf9d7fdc;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=492da992-d050-4087-a609-f6bdaf9d7fdc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=47bd9d9882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 identity=64739 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=492da992-d050-4087-a609-f6bdaf9d7fdc,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=492da992-d050-4087-a609-f6bdaf9d7fdc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-domain-manage-s2bhd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47bd9d9882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 identity=64739 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-domain-manage-s2bhd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=47bd9d9882 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2973 identity=64739 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-domain-manage-s2bhd subsys=endpoint level=info msg="Successful endpoint creation" containerID=47bd9d9882 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2973 identity=64739 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-domain-manage-s2bhd subsys=daemon level=info msg="Delete endpoint request" containerID=47bd9d9882 endpointID=2973 k8sNamespace=openstack k8sPodName=keystone-domain-manage-s2bhd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=492da992-d050-4087-a609-f6bdaf9d7fdc k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=492da992-d050-4087-a609-f6bdaf9d7fdc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=47bd9d9882 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2973 identity=64739 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-domain-manage-s2bhd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 56c1082a-4522-44dd-abc1-9e459087b4f2 default }" containerID=edff12532b626f35a1e32ec811865e915b4c1a2336d77fa1a70c5ca976adf3f4 datapathConfiguration="&{false false false false false }" interface=lxc4b3238405791 k8sPodName=openstack/keystone-bootstrap-lp7tl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edff12532b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3310 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-bootstrap-lp7tl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edff12532b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3310 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dde0569e-95cc-498c-8792-0a6ff2909123,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=dde0569e-95cc-498c-8792-0a6ff2909123,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-bootstrap-lp7tl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dde0569e-95cc-498c-8792-0a6ff2909123;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=dde0569e-95cc-498c-8792-0a6ff2909123;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=edff12532b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3310 identity=61780 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dde0569e-95cc-498c-8792-0a6ff2909123,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=dde0569e-95cc-498c-8792-0a6ff2909123,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-bootstrap-lp7tl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edff12532b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3310 identity=61780 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-bootstrap-lp7tl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=edff12532b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3310 identity=61780 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-bootstrap-lp7tl subsys=endpoint level=info msg="Successful endpoint creation" containerID=edff12532b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3310 identity=61780 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-bootstrap-lp7tl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=edff12532b endpointID=3310 k8sNamespace=openstack k8sPodName=keystone-bootstrap-lp7tl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dde0569e-95cc-498c-8792-0a6ff2909123 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=dde0569e-95cc-498c-8792-0a6ff2909123 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=edff12532b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3310 identity=61780 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-bootstrap-lp7tl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 cb3f3c3e-1013-4ce1-9f98-3478715e8e1d default }" containerID=ad7e436b1d1863721ba199200e5b44fb64a7770844c7cd90f5151ad5d59f93c8 datapathConfiguration="&{false false false false false }" interface=lxc89f67f72e7d2 k8sPodName=local-path-storage/helper-pod-create-pvc-9e5bbd2d-7cc9-4d98-8e9e-c4fd79082f55 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad7e436b1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1917 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9e5bbd2d-7cc9-4d98-8e9e-c4fd79082f55 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad7e436b1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1917 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9e5bbd2d-7cc9-4d98-8e9e-c4fd79082f55 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad7e436b1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1917 identity=16741 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9e5bbd2d-7cc9-4d98-8e9e-c4fd79082f55 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad7e436b1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1917 identity=16741 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9e5bbd2d-7cc9-4d98-8e9e-c4fd79082f55 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad7e436b1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1917 identity=16741 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9e5bbd2d-7cc9-4d98-8e9e-c4fd79082f55 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad7e436b1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1917 identity=16741 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9e5bbd2d-7cc9-4d98-8e9e-c4fd79082f55 subsys=daemon level=info msg="Delete endpoint request" containerID=ad7e436b1d endpointID=1917 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9e5bbd2d-7cc9-4d98-8e9e-c4fd79082f55 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ad7e436b1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1917 identity=16741 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9e5bbd2d-7cc9-4d98-8e9e-c4fd79082f55 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 7a8925b8-8c33-4dc1-b29c-8ab81629f24e default }" containerID=64e7598ea37f606a7ffbaabb3c0188c7c6519e52856bcd3066c069b7875bed18 datapathConfiguration="&{false false false false false }" interface=lxc37b01f10d37d k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64e7598ea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64e7598ea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=64e7598ea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64e7598ea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 identity=62610 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64e7598ea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 identity=62610 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64e7598ea3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2934 identity=62610 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=64e7598ea3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2934 identity=62610 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.147 057fb242-2d9e-4aa4-ae19-ae53c96f91e3 default }" containerID=e90b2446690152b22f115026c936c4d43647cf4540b47ecbde191ca074c5d305 datapathConfiguration="&{false false false false false }" interface=lxcae7ae242d18e k8sPodName=openstack/barbican-api-7bbc985898-cxfcd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e90b244669 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=983 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-api-7bbc985898-cxfcd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e90b244669 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=983 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-api-7bbc985898-cxfcd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e90b244669 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=983 identity=12701 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-api-7bbc985898-cxfcd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e90b244669 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=983 identity=12701 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-api-7bbc985898-cxfcd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.71 4fc59fc0-d13a-49bd-8433-66fae8c14ba5 default }" containerID=ec3aabedd70147bcb9eb4768147c7c7434672e334b684376c0c4e8bc0ede7c28 datapathConfiguration="&{false false false false false }" interface=lxc1d67546e3d47 k8sPodName=openstack/barbican-db-init-t799r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec3aabedd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/barbican-db-init-t799r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec3aabedd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=213022fe-4ee0-4756-9eb2-0c5975c79655,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=213022fe-4ee0-4756-9eb2-0c5975c79655,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/barbican-db-init-t799r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=213022fe-4ee0-4756-9eb2-0c5975c79655;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=213022fe-4ee0-4756-9eb2-0c5975c79655;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec3aabedd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 identity=29836 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=213022fe-4ee0-4756-9eb2-0c5975c79655,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=213022fe-4ee0-4756-9eb2-0c5975c79655,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/barbican-db-init-t799r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec3aabedd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 identity=29836 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/barbican-db-init-t799r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e90b244669 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=983 identity=12701 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-api-7bbc985898-cxfcd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e90b244669 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=983 identity=12701 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-api-7bbc985898-cxfcd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ec3aabedd7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2337 identity=29836 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/barbican-db-init-t799r subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec3aabedd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2337 identity=29836 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/barbican-db-init-t799r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec3aabedd7 endpointID=2337 k8sNamespace=openstack k8sPodName=barbican-db-init-t799r subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=213022fe-4ee0-4756-9eb2-0c5975c79655 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=213022fe-4ee0-4756-9eb2-0c5975c79655 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ec3aabedd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2337 identity=29836 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/barbican-db-init-t799r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 c9c88528-8637-4ab7-a8af-4341bfa81dbe default }" containerID=46add58270a0ac25f7bebf48e1afddf70483c876efd7284e9cd430f38298bafd datapathConfiguration="&{false false false false false }" interface=lxc19ed2d519ba6 k8sPodName=openstack/barbican-db-sync-tfg4g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46add58270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2111 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-db-sync-tfg4g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46add58270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2111 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8b4187ed-8d6c-406f-a2a5-3662742346a5,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8b4187ed-8d6c-406f-a2a5-3662742346a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-db-sync-tfg4g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8b4187ed-8d6c-406f-a2a5-3662742346a5;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=8b4187ed-8d6c-406f-a2a5-3662742346a5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=46add58270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2111 identity=13849 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8b4187ed-8d6c-406f-a2a5-3662742346a5,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8b4187ed-8d6c-406f-a2a5-3662742346a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-db-sync-tfg4g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46add58270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2111 identity=13849 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-db-sync-tfg4g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46add58270 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2111 identity=13849 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-db-sync-tfg4g subsys=endpoint level=info msg="Successful endpoint creation" containerID=46add58270 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2111 identity=13849 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-db-sync-tfg4g subsys=daemon level=info msg="Delete endpoint request" containerID=46add58270 endpointID=2111 k8sNamespace=openstack k8sPodName=barbican-db-sync-tfg4g subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8b4187ed-8d6c-406f-a2a5-3662742346a5 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=8b4187ed-8d6c-406f-a2a5-3662742346a5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=46add58270 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2111 identity=13849 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-db-sync-tfg4g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 4184ee65-9079-4dee-97d1-6288a2815235 default }" containerID=0fb0b22cc46e3f4378a624bc5e0d6ff40220a7b416abc8ef4195868a68e5e234 datapathConfiguration="&{false false false false false }" interface=lxc55710002ea04 k8sPodName=openstack/barbican-rabbit-init-tnx2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fb0b22cc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-rabbit-init-tnx2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fb0b22cc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=902f32b7-ce35-4e03-8398-a2cfa286ba7a,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=902f32b7-ce35-4e03-8398-a2cfa286ba7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-rabbit-init-tnx2v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=902f32b7-ce35-4e03-8398-a2cfa286ba7a;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=902f32b7-ce35-4e03-8398-a2cfa286ba7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fb0b22cc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identity=17852 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=902f32b7-ce35-4e03-8398-a2cfa286ba7a,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=902f32b7-ce35-4e03-8398-a2cfa286ba7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-rabbit-init-tnx2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fb0b22cc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identity=17852 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-rabbit-init-tnx2v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0fb0b22cc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1398 identity=17852 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-rabbit-init-tnx2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fb0b22cc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1398 identity=17852 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-rabbit-init-tnx2v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0fb0b22cc4 endpointID=1398 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-tnx2v subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=902f32b7-ce35-4e03-8398-a2cfa286ba7a k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=902f32b7-ce35-4e03-8398-a2cfa286ba7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0fb0b22cc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1398 identity=17852 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-rabbit-init-tnx2v subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036103182869587566 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.48 357cf3af-6f54-4358-b011-eececb11a9ec default }" containerID=a918a933c13c1f21eee9bc4c6dc5c91e2874c3b4c3fa12352f645d7769422abc datapathConfiguration="&{false false false false false }" interface=lxccb2445666f74 k8sPodName=openstack/barbican-ks-service-ddm9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a918a933c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-service-ddm9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a918a933c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=85cfff2d-66c1-411b-aaa4-ca6b34a6f1ff,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=85cfff2d-66c1-411b-aaa4-ca6b34a6f1ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-service-ddm9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=85cfff2d-66c1-411b-aaa4-ca6b34a6f1ff;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=85cfff2d-66c1-411b-aaa4-ca6b34a6f1ff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a918a933c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identity=8385 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=85cfff2d-66c1-411b-aaa4-ca6b34a6f1ff,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=85cfff2d-66c1-411b-aaa4-ca6b34a6f1ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-service-ddm9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a918a933c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identity=8385 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-service-ddm9t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a918a933c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3268 identity=8385 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-service-ddm9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=a918a933c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3268 identity=8385 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-service-ddm9t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a918a933c1 endpointID=3268 k8sNamespace=openstack k8sPodName=barbican-ks-service-ddm9t subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=85cfff2d-66c1-411b-aaa4-ca6b34a6f1ff k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=85cfff2d-66c1-411b-aaa4-ca6b34a6f1ff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a918a933c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3268 identity=8385 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-service-ddm9t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 40b3389e-d058-4294-9cf8-50ede5a326b3 default }" containerID=37c966ec3515969d02991ba2bab4fd23ed5f62fc377043b114dae305e7cfc872 datapathConfiguration="&{false false false false false }" interface=lxc82187fcc5c20 k8sPodName=openstack/barbican-ks-endpoints-fqxkr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37c966ec35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fqxkr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37c966ec35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a29dbca2-97ee-4027-84b5-bdded7eb350f,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a29dbca2-97ee-4027-84b5-bdded7eb350f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fqxkr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a29dbca2-97ee-4027-84b5-bdded7eb350f;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a29dbca2-97ee-4027-84b5-bdded7eb350f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37c966ec35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identity=13629 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a29dbca2-97ee-4027-84b5-bdded7eb350f,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a29dbca2-97ee-4027-84b5-bdded7eb350f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fqxkr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37c966ec35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identity=13629 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fqxkr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=37c966ec35 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=937 identity=13629 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fqxkr subsys=endpoint level=info msg="Successful endpoint creation" containerID=37c966ec35 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=937 identity=13629 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fqxkr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=37c966ec35 endpointID=937 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-fqxkr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a29dbca2-97ee-4027-84b5-bdded7eb350f k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a29dbca2-97ee-4027-84b5-bdded7eb350f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=37c966ec35 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=937 identity=13629 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fqxkr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 eb22d53a-66ea-428b-942a-a657ab2bd732 default }" containerID=17b1bb26e1517bd5d6e9d28d27712d64ca869a13ea71853bccd14631f2db1681 datapathConfiguration="&{false false false false false }" interface=lxcf3e1e6e45420 k8sPodName=openstack/barbican-ks-user-4wzbc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17b1bb26e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-ks-user-4wzbc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17b1bb26e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=24c07475-685a-4e24-9562-34e7c23bbff9,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=24c07475-685a-4e24-9562-34e7c23bbff9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-ks-user-4wzbc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=24c07475-685a-4e24-9562-34e7c23bbff9;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=24c07475-685a-4e24-9562-34e7c23bbff9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17b1bb26e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=11705 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=24c07475-685a-4e24-9562-34e7c23bbff9,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=24c07475-685a-4e24-9562-34e7c23bbff9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-ks-user-4wzbc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17b1bb26e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=11705 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-ks-user-4wzbc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=17b1bb26e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=82 identity=11705 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-ks-user-4wzbc subsys=endpoint level=info msg="Successful endpoint creation" containerID=17b1bb26e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=82 identity=11705 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-ks-user-4wzbc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=17b1bb26e1 endpointID=82 k8sNamespace=openstack k8sPodName=barbican-ks-user-4wzbc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=24c07475-685a-4e24-9562-34e7c23bbff9 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=24c07475-685a-4e24-9562-34e7c23bbff9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=17b1bb26e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=82 identity=11705 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/barbican-ks-user-4wzbc subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.213 44005b70-9d70-4cc1-aff6-446b6e20b3a3 default }" containerID=27d8ec31ab9c574cf7d780c544276e7b47d74f13d1b540f0ab8f5e1e7511dcbc datapathConfiguration="&{false false false false false }" interface=lxc58a9e2e809e3 k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-7f5z4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27d8ec31ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 ipv4=10.0.0.213 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-7f5z4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27d8ec31ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.213 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-7f5z4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=27d8ec31ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.213 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-7f5z4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27d8ec31ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 identity=6205 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.213 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-7f5z4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27d8ec31ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 identity=6205 ipv4=10.0.0.213 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-7f5z4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=27d8ec31ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3156 identity=6205 ipv4=10.0.0.213 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-7f5z4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=27d8ec31ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3156 identity=6205 ipv4=10.0.0.213 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-7f5z4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.148 21712732-f6c4-43ab-9f41-7ae527b840e3 default }" containerID=c5495a8bf8a5bb745c542bc00128e1850d2f9c04b847ead2ed1be1b2f5edd7bf datapathConfiguration="&{false false false false false }" interface=lxc88823cee498f k8sPodName=openstack/rook-ceph-detect-version-7n6g4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5495a8bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7n6g4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5495a8bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=dafa7952-408e-43a9-afa0-3868bff0dedb,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=dafa7952-408e-43a9-afa0-3868bff0dedb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7n6g4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c5495a8bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7n6g4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=dafa7952-408e-43a9-afa0-3868bff0dedb;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=dafa7952-408e-43a9-afa0-3868bff0dedb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5495a8bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identity=21152 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=dafa7952-408e-43a9-afa0-3868bff0dedb,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=dafa7952-408e-43a9-afa0-3868bff0dedb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7n6g4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5495a8bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identity=21152 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7n6g4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5495a8bf8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=376 identity=21152 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7n6g4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5495a8bf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=376 identity=21152 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7n6g4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c5495a8bf8 endpointID=376 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-7n6g4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=dafa7952-408e-43a9-afa0-3868bff0dedb k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=dafa7952-408e-43a9-afa0-3868bff0dedb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=c5495a8bf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=376 identity=21152 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7n6g4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 70fcf144-e145-411a-9fe6-e1494ae5fb6b default }" containerID=895891c1240e18bf40c6dfb2258562e0fed52ca39bf60019dbdc51cacce6173d datapathConfiguration="&{false false false false false }" interface=lxc8335681bf0a2 k8sPodName=openstack/ceph-object-controller-detect-version-rsjm2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=895891c124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rsjm2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=895891c124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=a8775c93-99e1-4ba9-a30c-328b15f03437,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=a8775c93-99e1-4ba9-a30c-328b15f03437,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rsjm2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=a8775c93-99e1-4ba9-a30c-328b15f03437;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=a8775c93-99e1-4ba9-a30c-328b15f03437;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=895891c124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 identity=504 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=a8775c93-99e1-4ba9-a30c-328b15f03437,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=a8775c93-99e1-4ba9-a30c-328b15f03437,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rsjm2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=895891c124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 identity=504 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rsjm2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=895891c124 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=370 identity=504 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rsjm2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=895891c124 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=370 identity=504 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rsjm2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=895891c124 endpointID=370 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-rsjm2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=a8775c93-99e1-4ba9-a30c-328b15f03437 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=a8775c93-99e1-4ba9-a30c-328b15f03437 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=895891c124 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=370 identity=504 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rsjm2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 77964782-83c3-4d86-a261-4ec921fd099a default }" containerID=645b0afb99f0203cfa44818c30a53bd6121af87c2080f485d1b2daf534e67355 datapathConfiguration="&{false false false false false }" interface=lxca3cbcab9ceeb k8sPodName=local-path-storage/helper-pod-create-pvc-41b93320-0232-44c4-bc6d-c89b2d7a310e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=645b0afb99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41b93320-0232-44c4-bc6d-c89b2d7a310e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=645b0afb99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41b93320-0232-44c4-bc6d-c89b2d7a310e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=645b0afb99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identity=16741 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41b93320-0232-44c4-bc6d-c89b2d7a310e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=645b0afb99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identity=16741 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41b93320-0232-44c4-bc6d-c89b2d7a310e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=645b0afb99 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=642 identity=16741 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41b93320-0232-44c4-bc6d-c89b2d7a310e subsys=endpoint level=info msg="Successful endpoint creation" containerID=645b0afb99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=642 identity=16741 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41b93320-0232-44c4-bc6d-c89b2d7a310e subsys=daemon level=info msg="Delete endpoint request" containerID=645b0afb99 endpointID=642 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-41b93320-0232-44c4-bc6d-c89b2d7a310e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=645b0afb99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=642 identity=16741 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41b93320-0232-44c4-bc6d-c89b2d7a310e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 bf2acb8e-eaeb-4fe4-9202-c8b984fb5344 default }" containerID=fb6a8b76ebe17ef7b7c769dd1d70a5af27236ba9aaa86b98fff26ac84b134d45 datapathConfiguration="&{false false false false false }" interface=lxc35b567643bc4 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb6a8b76eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb6a8b76eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb6a8b76eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identity=15162 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb6a8b76eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identity=15162 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb6a8b76eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=987 identity=15162 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb6a8b76eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=987 identity=15162 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.94 290dc5e1-0de0-4b20-b1e2-f95fc82e8e9e default }" containerID=b2dd9055852a9353c5c4562023f3b60a49b4fdad4d6e48084cce7d6c9b20bf7e datapathConfiguration="&{false false false false false }" interface=lxcd4ed11d466d5 k8sPodName=openstack/glance-db-init-rc2zn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2dd905585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2341 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-rc2zn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2dd905585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2341 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e5eda20d-8c09-4f28-81cd-daf7f0b7f715,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=e5eda20d-8c09-4f28-81cd-daf7f0b7f715,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-rc2zn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e5eda20d-8c09-4f28-81cd-daf7f0b7f715;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=e5eda20d-8c09-4f28-81cd-daf7f0b7f715;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2dd905585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2341 identity=39931 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e5eda20d-8c09-4f28-81cd-daf7f0b7f715,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=e5eda20d-8c09-4f28-81cd-daf7f0b7f715,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-rc2zn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b2dd905585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2341 identity=39931 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-rc2zn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2dd905585 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2341 identity=39931 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-rc2zn subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2dd905585 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2341 identity=39931 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-rc2zn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b2dd905585 endpointID=2341 k8sNamespace=openstack k8sPodName=glance-db-init-rc2zn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e5eda20d-8c09-4f28-81cd-daf7f0b7f715 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=e5eda20d-8c09-4f28-81cd-daf7f0b7f715 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b2dd905585 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2341 identity=39931 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-rc2zn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 ae24559f-157b-4d8c-a953-4b4eb87eebe5 default }" containerID=ffc92c5dc85b80a3c89a2dbc939452afcfba528f9c20ed4af1db75bae7b92641 datapathConfiguration="&{false false false false false }" interface=lxcd8a04934207f k8sPodName=openstack/glance-db-sync-mhvjd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ffc92c5dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-db-sync-mhvjd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ffc92c5dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c2969aaf-f462-41e7-ad75-48d75f9e7766,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c2969aaf-f462-41e7-ad75-48d75f9e7766,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-db-sync-mhvjd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c2969aaf-f462-41e7-ad75-48d75f9e7766;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=c2969aaf-f462-41e7-ad75-48d75f9e7766;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ffc92c5dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 identity=20148 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c2969aaf-f462-41e7-ad75-48d75f9e7766,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c2969aaf-f462-41e7-ad75-48d75f9e7766,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-db-sync-mhvjd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ffc92c5dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 identity=20148 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-db-sync-mhvjd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ffc92c5dc8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1083 identity=20148 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-db-sync-mhvjd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ffc92c5dc8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1083 identity=20148 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-db-sync-mhvjd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ffc92c5dc8 endpointID=1083 k8sNamespace=openstack k8sPodName=glance-db-sync-mhvjd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c2969aaf-f462-41e7-ad75-48d75f9e7766 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=c2969aaf-f462-41e7-ad75-48d75f9e7766 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ffc92c5dc8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1083 identity=20148 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-db-sync-mhvjd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 6c250dcc-ba46-4e25-bd90-0df372e462e7 default }" containerID=2defa2ff7461ba053ad0f1695b9552453ff0c3f984eba97b948e848ad0114c5b datapathConfiguration="&{false false false false false }" interface=lxce3219a2f929c k8sPodName=openstack/glance-rabbit-init-44rvj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2defa2ff74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1847 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-rabbit-init-44rvj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2defa2ff74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1847 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b73c605d-e15f-495c-a752-25698ff3f67d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b73c605d-e15f-495c-a752-25698ff3f67d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-rabbit-init-44rvj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b73c605d-e15f-495c-a752-25698ff3f67d;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b73c605d-e15f-495c-a752-25698ff3f67d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2defa2ff74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1847 identity=52571 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b73c605d-e15f-495c-a752-25698ff3f67d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b73c605d-e15f-495c-a752-25698ff3f67d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-rabbit-init-44rvj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2defa2ff74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1847 identity=52571 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-rabbit-init-44rvj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2defa2ff74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1847 identity=52571 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-rabbit-init-44rvj subsys=endpoint level=info msg="Successful endpoint creation" containerID=2defa2ff74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1847 identity=52571 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-rabbit-init-44rvj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2defa2ff74 endpointID=1847 k8sNamespace=openstack k8sPodName=glance-rabbit-init-44rvj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b73c605d-e15f-495c-a752-25698ff3f67d k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b73c605d-e15f-495c-a752-25698ff3f67d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2defa2ff74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1847 identity=52571 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/glance-rabbit-init-44rvj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 d3ab4b85-b634-448c-af69-ce2be102f7cf default }" containerID=549dbb64b652a125a916cdf844a2fbf94694e9a80a1767da2911b833d6df0f13 datapathConfiguration="&{false false false false false }" interface=lxc6989d16b32b0 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-drpw2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=549dbb64b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-drpw2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=549dbb64b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-drpw2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=549dbb64b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 identity=8214 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-drpw2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=549dbb64b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 identity=8214 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-drpw2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 43cd2b2e-c83e-4e71-86e1-a643ffd03952 default }" containerID=2545796f2e05584bda940d50d174097d8c85574d066dde83f654711b9ab82afe datapathConfiguration="&{false false false false false }" interface=lxc8ea1cb76e56e k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wgm6r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2545796f2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wgm6r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2545796f2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wgm6r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2545796f2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 identity=18052 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wgm6r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2545796f2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 identity=18052 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wgm6r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=549dbb64b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=871 identity=8214 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-drpw2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=549dbb64b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=871 identity=8214 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-drpw2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2545796f2e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3548 identity=18052 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wgm6r subsys=endpoint level=info msg="Successful endpoint creation" containerID=2545796f2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3548 identity=18052 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wgm6r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.96 cc2ce5c7-7c68-4c39-8325-c431d5ae138b default }" containerID=33a463d34e040596dd95cb36806bc95cb5f285d9ea6d764ac704a0a6d70817df datapathConfiguration="&{false false false false false }" interface=lxca50a88737220 k8sPodName=openstack/glance-ks-service-l72xd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33a463d34e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-service-l72xd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33a463d34e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=494ea08b-3100-4ceb-ba9d-cfc7dc1b4054,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=494ea08b-3100-4ceb-ba9d-cfc7dc1b4054,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-service-l72xd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=494ea08b-3100-4ceb-ba9d-cfc7dc1b4054;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=494ea08b-3100-4ceb-ba9d-cfc7dc1b4054;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33a463d34e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identity=45367 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=494ea08b-3100-4ceb-ba9d-cfc7dc1b4054,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=494ea08b-3100-4ceb-ba9d-cfc7dc1b4054,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-service-l72xd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33a463d34e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identity=45367 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-service-l72xd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33a463d34e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=283 identity=45367 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-service-l72xd subsys=endpoint level=info msg="Successful endpoint creation" containerID=33a463d34e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=283 identity=45367 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-service-l72xd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=33a463d34e endpointID=283 k8sNamespace=openstack k8sPodName=glance-ks-service-l72xd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=494ea08b-3100-4ceb-ba9d-cfc7dc1b4054 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=494ea08b-3100-4ceb-ba9d-cfc7dc1b4054 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=33a463d34e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=283 identity=45367 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-service-l72xd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 52fd539b-2316-419d-ab73-283365d34d15 default }" containerID=76d056c68f94a07d3bcc536471cd683a3fb5dda8fbb7063d6c6e03e7a6a19f0b datapathConfiguration="&{false false false false false }" interface=lxc2936098ac976 k8sPodName=openstack/glance-ks-endpoints-zttpm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76d056c68f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2874 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-endpoints-zttpm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76d056c68f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2874 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=990802ac-6581-44a2-b667-33422aafcdf5,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=990802ac-6581-44a2-b667-33422aafcdf5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-endpoints-zttpm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=990802ac-6581-44a2-b667-33422aafcdf5;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=990802ac-6581-44a2-b667-33422aafcdf5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76d056c68f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2874 identity=37252 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=990802ac-6581-44a2-b667-33422aafcdf5,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=990802ac-6581-44a2-b667-33422aafcdf5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-endpoints-zttpm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=76d056c68f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2874 identity=37252 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-endpoints-zttpm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76d056c68f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2874 identity=37252 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-endpoints-zttpm subsys=endpoint level=info msg="Successful endpoint creation" containerID=76d056c68f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2874 identity=37252 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-endpoints-zttpm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.47 e360df85-e9a9-42cf-b0df-674100c4cdd0 default }" containerID=60a609ff88d674478867bbe56e99d86e7aa58b28ca2380f6f4d2d5fade105387 datapathConfiguration="&{false false false false false }" interface=lxcb83a5c3820b4 k8sPodName=openstack/ceph-object-controller-detect-version-5zp8l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60a609ff88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5zp8l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60a609ff88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=639f083b-1dd1-4d22-bbdd-dd4476ae0602,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=639f083b-1dd1-4d22-bbdd-dd4476ae0602,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5zp8l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=639f083b-1dd1-4d22-bbdd-dd4476ae0602;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=639f083b-1dd1-4d22-bbdd-dd4476ae0602;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60a609ff88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identity=52360 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=639f083b-1dd1-4d22-bbdd-dd4476ae0602,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=639f083b-1dd1-4d22-bbdd-dd4476ae0602,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5zp8l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60a609ff88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identity=52360 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5zp8l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60a609ff88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2631 identity=52360 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5zp8l subsys=endpoint level=info msg="Successful endpoint creation" containerID=60a609ff88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2631 identity=52360 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5zp8l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=76d056c68f endpointID=2874 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-zttpm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=990802ac-6581-44a2-b667-33422aafcdf5 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=990802ac-6581-44a2-b667-33422aafcdf5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=76d056c68f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2874 identity=37252 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-endpoints-zttpm subsys=endpoint level=info msg="Delete endpoint request" containerID=60a609ff88 endpointID=2631 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-5zp8l subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=639f083b-1dd1-4d22-bbdd-dd4476ae0602 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=639f083b-1dd1-4d22-bbdd-dd4476ae0602 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=60a609ff88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2631 identity=52360 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5zp8l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 54b6a093-1f00-433b-9154-770594c0db39 default }" containerID=b9a7caf5f01f37013cfdef965d19c47694f80903657bbaa411a9cd86ee158b3a datapathConfiguration="&{false false false false false }" interface=lxc80e5220fda2b k8sPodName=openstack/glance-ks-user-rs7w8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9a7caf5f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1327 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-user-rs7w8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9a7caf5f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1327 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8d0dd047-f724-4a0f-87b5-155d89a827e4,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=8d0dd047-f724-4a0f-87b5-155d89a827e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-user-rs7w8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8d0dd047-f724-4a0f-87b5-155d89a827e4;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=8d0dd047-f724-4a0f-87b5-155d89a827e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9a7caf5f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1327 identity=56552 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8d0dd047-f724-4a0f-87b5-155d89a827e4,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=8d0dd047-f724-4a0f-87b5-155d89a827e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-user-rs7w8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9a7caf5f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1327 identity=56552 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-user-rs7w8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b9a7caf5f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1327 identity=56552 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-user-rs7w8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9a7caf5f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1327 identity=56552 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-user-rs7w8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b9a7caf5f0 endpointID=1327 k8sNamespace=openstack k8sPodName=glance-ks-user-rs7w8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8d0dd047-f724-4a0f-87b5-155d89a827e4 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=8d0dd047-f724-4a0f-87b5-155d89a827e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b9a7caf5f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1327 identity=56552 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-user-rs7w8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 f4e1514d-c49f-4ed7-a02e-878f77ed3c13 default }" containerID=9003eee597ec52d18d471892e95432ae634fc1508a5354efd6fc464588d50373 datapathConfiguration="&{false false false false false }" interface=lxcc59ca923fb83 k8sPodName=openstack/glance-metadefs-load-mkhtz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9003eee597 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-metadefs-load-mkhtz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9003eee597 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4f26c1ec-ca5f-450c-beb9-b6b3c273c5ca,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=4f26c1ec-ca5f-450c-beb9-b6b3c273c5ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-metadefs-load-mkhtz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4f26c1ec-ca5f-450c-beb9-b6b3c273c5ca;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=4f26c1ec-ca5f-450c-beb9-b6b3c273c5ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9003eee597 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 identity=16155 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4f26c1ec-ca5f-450c-beb9-b6b3c273c5ca,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=4f26c1ec-ca5f-450c-beb9-b6b3c273c5ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-metadefs-load-mkhtz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9003eee597 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 identity=16155 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-metadefs-load-mkhtz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9003eee597 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=488 identity=16155 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-metadefs-load-mkhtz subsys=endpoint level=info msg="Successful endpoint creation" containerID=9003eee597 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=488 identity=16155 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-metadefs-load-mkhtz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9003eee597 endpointID=488 k8sNamespace=openstack k8sPodName=glance-metadefs-load-mkhtz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4f26c1ec-ca5f-450c-beb9-b6b3c273c5ca k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=4f26c1ec-ca5f-450c-beb9-b6b3c273c5ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9003eee597 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=488 identity=16155 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-metadefs-load-mkhtz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 7888536b-a2a6-4f84-b2de-f080f2422c68 default }" containerID=7bc2ca465a6cc88d52d976427b4cbdb84c2f86542fdf26fdb3088161ab1e5976 datapathConfiguration="&{false false false false false }" interface=lxc88a0df74f410 k8sPodName=openstack/glance-storage-init-t5bth labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7bc2ca465a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-storage-init-t5bth subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7bc2ca465a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fff5269d-05de-41aa-a05d-9b8d894b888f,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=fff5269d-05de-41aa-a05d-9b8d894b888f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-storage-init-t5bth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fff5269d-05de-41aa-a05d-9b8d894b888f;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=fff5269d-05de-41aa-a05d-9b8d894b888f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7bc2ca465a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identity=6213 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fff5269d-05de-41aa-a05d-9b8d894b888f,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=fff5269d-05de-41aa-a05d-9b8d894b888f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-storage-init-t5bth oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7bc2ca465a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identity=6213 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-storage-init-t5bth subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7bc2ca465a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=296 identity=6213 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-storage-init-t5bth subsys=endpoint level=info msg="Successful endpoint creation" containerID=7bc2ca465a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=296 identity=6213 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-storage-init-t5bth subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7bc2ca465a endpointID=296 k8sNamespace=openstack k8sPodName=glance-storage-init-t5bth subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fff5269d-05de-41aa-a05d-9b8d894b888f k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=fff5269d-05de-41aa-a05d-9b8d894b888f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7bc2ca465a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=296 identity=6213 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-storage-init-t5bth subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 f1489ecb-c812-493e-b910-c968036102fe default }" containerID=b8d1f35ae63fe1d45e8032e954bd35e60179429c2ef7db23261b2e963c4a6e08 datapathConfiguration="&{false false false false false }" interface=lxc88bcdf45c71a k8sPodName=openstack/glance-api-6ffff56b8f-hnxrm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8d1f35ae6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-api-6ffff56b8f-hnxrm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8d1f35ae6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-api-6ffff56b8f-hnxrm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8d1f35ae6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identity=3053 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-api-6ffff56b8f-hnxrm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8d1f35ae6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identity=3053 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-api-6ffff56b8f-hnxrm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b8d1f35ae6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2363 identity=3053 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-api-6ffff56b8f-hnxrm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8d1f35ae6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2363 identity=3053 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-api-6ffff56b8f-hnxrm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.95 80b0abab-e32a-4979-bb7c-a3ea865a9899 default }" containerID=e90f4ac854a1ef7e7faa29820ddf30ece8f235f87101d0247e73aa3d3d85c9a9 datapathConfiguration="&{false false false false false }" interface=lxc62201d816151 k8sPodName=openstack/staffeln-api-7f87d8669c-8r248 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e90f4ac854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1245 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-api-7f87d8669c-8r248 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e90f4ac854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1245 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-api-7f87d8669c-8r248 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e90f4ac854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1245 identity=27959 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-api-7f87d8669c-8r248 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e90f4ac854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1245 identity=27959 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-api-7f87d8669c-8r248 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 d6092b4c-2515-49ad-a45b-81b04efc4706 default }" containerID=4ad1c3653e46d9b769db5b051ba9ea33f2bfbaf5eb51741ebdf794cdc722ab5f datapathConfiguration="&{false false false false false }" interface=lxc99ab8168cfe8 k8sPodName=openstack/staffeln-conductor-5d5f89795d-jmv2f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ad1c3653e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-conductor-5d5f89795d-jmv2f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ad1c3653e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-conductor-5d5f89795d-jmv2f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ad1c3653e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identity=7017 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-conductor-5d5f89795d-jmv2f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ad1c3653e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identity=7017 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-conductor-5d5f89795d-jmv2f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 1c6cce03-c41a-4014-88fa-cf1aee453fb5 default }" containerID=21e837eecf703b1a07c80aca0a8a66a0c0b1c2a6598df589ce4620d895913270 datapathConfiguration="&{false false false false false }" interface=lxc3fcce22ba401 k8sPodName=openstack/staffeln-db-init-tftp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21e837eecf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1219 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-db-init-tftp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21e837eecf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1219 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=dc199e10-9632-4d8a-970b-800ffd895eea,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=dc199e10-9632-4d8a-970b-800ffd895eea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-db-init-tftp7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=dc199e10-9632-4d8a-970b-800ffd895eea;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=dc199e10-9632-4d8a-970b-800ffd895eea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21e837eecf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1219 identity=17814 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=dc199e10-9632-4d8a-970b-800ffd895eea,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=dc199e10-9632-4d8a-970b-800ffd895eea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-db-init-tftp7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21e837eecf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1219 identity=17814 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-db-init-tftp7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e90f4ac854 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1245 identity=27959 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-api-7f87d8669c-8r248 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e90f4ac854 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1245 identity=27959 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-api-7f87d8669c-8r248 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4ad1c3653e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1143 identity=7017 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-conductor-5d5f89795d-jmv2f subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ad1c3653e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1143 identity=7017 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-conductor-5d5f89795d-jmv2f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=21e837eecf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1219 identity=17814 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-db-init-tftp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=21e837eecf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1219 identity=17814 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-db-init-tftp7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=21e837eecf endpointID=1219 k8sNamespace=openstack k8sPodName=staffeln-db-init-tftp7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=dc199e10-9632-4d8a-970b-800ffd895eea k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=dc199e10-9632-4d8a-970b-800ffd895eea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=21e837eecf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1219 identity=17814 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-db-init-tftp7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 1bac7d27-cf14-48a9-a312-973a598ab169 default }" containerID=e553e5e3ad2b1068a933a6a8cad8f3947a2068c05af855befb7c19a3a8f19dce datapathConfiguration="&{false false false false false }" interface=lxc5cbfd5796051 k8sPodName=openstack/staffeln-db-sync-6dp5w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e553e5e3ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3002 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-db-sync-6dp5w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e553e5e3ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3002 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=50544d70-896b-4ecf-8ec5-f9be5be98317,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=50544d70-896b-4ecf-8ec5-f9be5be98317,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-db-sync-6dp5w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e553e5e3ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3002 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-db-sync-6dp5w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=50544d70-896b-4ecf-8ec5-f9be5be98317;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=50544d70-896b-4ecf-8ec5-f9be5be98317;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e553e5e3ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3002 identity=3058 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=50544d70-896b-4ecf-8ec5-f9be5be98317,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=50544d70-896b-4ecf-8ec5-f9be5be98317,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-db-sync-6dp5w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e553e5e3ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3002 identity=3058 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-db-sync-6dp5w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e553e5e3ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3002 identity=3058 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-db-sync-6dp5w subsys=endpoint level=info msg="Successful endpoint creation" containerID=e553e5e3ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3002 identity=3058 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-db-sync-6dp5w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager