level=info msg="Memory available for map entries (0.003% of 67421650944B): 168554127B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.780364ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="94.232µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=2.053359ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="25.44µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=115.216251ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="72.601µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="22.071µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="82.571µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="165.913µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="158.603µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="578.981µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.36µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=13.262943ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.507092ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="192.874µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="342.717µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="456.939µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="228.125µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="157.073µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=52.387342ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="145.073µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.841µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.70.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.863883ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="13.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.898509ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="19.941µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.680004ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="83.892µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="8.331µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="4.51µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="5.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="46.78µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="21.29µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="65.801µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="402.178µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="10.121µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.46µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="261.755µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration=2.455907ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.320415ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="6.84µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="34.881µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.70 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.70 ipAddr.ipv6="" k8sNodeIP=199.204.45.70 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.70" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.159" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.70" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.70} {CiliumInternalIP 10.0.0.159}] 10.0.0.0/24 [] [] 10.0.0.173 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:36741" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.437149197s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="289.915µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="9.59µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="50.031µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="4.35µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=315 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=315 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=315 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.533416229s subsys=daemon level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Compiled new BPF template" BPFCompilationTime=303.224323ms file-path=/var/run/cilium/state/templates/66f99cddaeb8c1e2054019c3f358f63949f2c23ce50e7a90cb158ef817510760/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=315 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 ipv4=10.0.0.173 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identityLabels="reserved:health" ipv4=10.0.0.173 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identity=4 identityLabels="reserved:health" ipv4=10.0.0.173 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.130074678s file-path=/var/run/cilium/state/templates/29173b05c9a15700c1940c39e268feb8d29d3df6418ac485539d84b0ec299a39/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1192 identity=4 ipv4=10.0.0.173 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 2e278e1b-0a21-4bd2-a41c-856d674364f2 default }" containerID=81604c439a9a8d36c17e22697d402babebf52798a59f8f11c532e5295ed0996f datapathConfiguration="&{false false false false false }" interface=lxcc9713919d381 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vlnfk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81604c439a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 ipv4=10.0.0.76 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vlnfk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 ba8b0ead-36c6-44d6-80e4-56d7a18f047f default }" containerID=8e15f67b30c81beaff648eac7a05afe1aacf97838eda7321b6d353e087696147 datapathConfiguration="&{false false false false false }" interface=lxcb4cc4fbd5d62 k8sPodName=kube-system/coredns-7c96b6546b-96jzq labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=81604c439a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=8ab2f26f-8f9f-419a-96dc-16ff1290704b,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=8ab2f26f-8f9f-419a-96dc-16ff1290704b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.76 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vlnfk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="New endpoint" containerID=8e15f67b30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2820 ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-96jzq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e15f67b30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-96jzq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8e15f67b30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2820 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-96jzq line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=81604c439a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.76 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vlnfk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=8ab2f26f-8f9f-419a-96dc-16ff1290704b;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=8ab2f26f-8f9f-419a-96dc-16ff1290704b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81604c439a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identity=3498 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=8ab2f26f-8f9f-419a-96dc-16ff1290704b,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=8ab2f26f-8f9f-419a-96dc-16ff1290704b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.76 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vlnfk oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=81604c439a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=737 identity=3498 ipv4=10.0.0.76 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vlnfk subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e15f67b30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2820 identity=9027 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-96jzq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e15f67b30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2820 identity=9027 ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-96jzq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81604c439a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=737 identity=3498 ipv4=10.0.0.76 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vlnfk subsys=endpoint level=info msg="Successful endpoint creation" containerID=81604c439a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=737 identity=3498 ipv4=10.0.0.76 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vlnfk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8e15f67b30 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2820 identity=9027 ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-96jzq subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e15f67b30 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2820 identity=9027 ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-96jzq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=81604c439a endpointID=737 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-vlnfk subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=8ab2f26f-8f9f-419a-96dc-16ff1290704b k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=8ab2f26f-8f9f-419a-96dc-16ff1290704b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=81604c439a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=737 identity=3498 ipv4=10.0.0.76 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vlnfk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 f1092e7f-46d1-442e-afcf-015dcdae9b89 default }" containerID=d49e9270530e663f18ade8af5f925488f7f2c13a9867cc0cedb6ce4be33408f0 datapathConfiguration="&{false false false false false }" interface=lxc66d873bcd14a k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-62gqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d49e927053 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-62gqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d49e927053 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-62gqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d49e927053 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 identity=55744 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-62gqb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d49e927053 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 identity=55744 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-62gqb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d49e927053 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3014 identity=55744 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-62gqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=d49e927053 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3014 identity=55744 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-62gqb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=315 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00315 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00315 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00315 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00315:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=315 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 44a57a38-74af-4536-93df-bb1dc32e3d32 default }" containerID=e8777529e37f28e8ecb912f208c1a050ca3079dcb775584b0953ea02596282c2 datapathConfiguration="&{false false false false false }" interface=lxc64f448b4b553 k8sPodName=kube-system/coredns-67659f764b-876kw labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.35 6735f1cd-254e-4c37-968a-aa29acf285da default }" containerID=4e2bba7c45ce1a314b28bd65f8dd0d816bb58c679f4e83cd79d7108b835cbf89 datapathConfiguration="&{false false false false false }" interface=lxcca22dada3da2 k8sPodName=kube-system/coredns-67659f764b-xzkhc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8777529e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 ipv4=10.0.0.55 ipv6= k8sPodName=kube-system/coredns-67659f764b-876kw subsys=endpoint level=info msg="New endpoint" containerID=4e2bba7c45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-xzkhc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e2bba7c45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-xzkhc subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4e2bba7c45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identity=9027 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-xzkhc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e2bba7c45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identity=9027 ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-xzkhc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8777529e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.55 ipv6= k8sPodName=kube-system/coredns-67659f764b-876kw subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e8777529e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identity=9027 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.55 ipv6= k8sPodName=kube-system/coredns-67659f764b-876kw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8777529e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identity=9027 ipv4=10.0.0.55 ipv6= k8sPodName=kube-system/coredns-67659f764b-876kw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8777529e3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1377 identity=9027 ipv4=10.0.0.55 ipv6= k8sPodName=kube-system/coredns-67659f764b-876kw subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8777529e3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1377 identity=9027 ipv4=10.0.0.55 ipv6= k8sPodName=kube-system/coredns-67659f764b-876kw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4e2bba7c45 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2768 identity=9027 ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-xzkhc subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e2bba7c45 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2768 identity=9027 ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-xzkhc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.227 ab61e36c-bf3d-4d70-8398-9701b9f45fbe default }" containerID=4cbd75517257f8b8936dfd5e3961189b7c9320a6c14145684bdc2fcaebf50233 datapathConfiguration="&{false false false false false }" interface=lxc257e8ff703a6 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-9wkqz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cbd755172 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-9wkqz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cbd755172 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-9wkqz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4cbd755172 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 identity=1212 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-9wkqz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cbd755172 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 identity=1212 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-9wkqz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4cbd755172 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2113 identity=1212 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-9wkqz subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cbd755172 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2113 identity=1212 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-9wkqz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e15f67b30 endpointID=2820 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-96jzq subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=8e15f67b30 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2820 identity=9027 ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-96jzq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 a60c3c5d-b3d1-40c1-8e85-5058dbf1b059 default }" containerID=e8209c40588c75bce5cd7eabac21da4a985168a5c9b181eb207b9f5994160636 datapathConfiguration="&{false false false false false }" interface=lxcf23cca66a7a0 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-xjvrd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8209c4058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-xjvrd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8209c4058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-xjvrd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e8209c4058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-xjvrd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e8209c4058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identity=42790 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-xjvrd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8209c4058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identity=42790 ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-xjvrd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 7f8eca93-e582-40dc-80b3-e8b16385ddbc default }" containerID=3c0e7028fc231b97b58a77c73624b803b9ab700f33c9ab040f5bf3807eef731a datapathConfiguration="&{false false false false false }" interface=lxc9639fa22b14e k8sPodName=cert-manager/cert-manager-75c4c745bc-cgln6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c0e7028fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 ipv4=10.0.0.243 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cgln6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c0e7028fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.243 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cgln6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c0e7028fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=8358 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.243 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cgln6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c0e7028fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=8358 ipv4=10.0.0.243 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cgln6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8209c4058 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1201 identity=42790 ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-xjvrd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8209c4058 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1201 identity=42790 ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-xjvrd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.241 d6084d61-62fd-47ba-85ea-69f632f78606 default }" containerID=c0d2ec5532f37af3f459b3bf1933beda3ab7d5342e65df30fbc4d8d72ab3cc2b datapathConfiguration="&{false false false false false }" interface=lxc43b87409b5bd k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8h5zl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0d2ec5532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8h5zl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0d2ec5532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8h5zl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0d2ec5532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identity=36103 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8h5zl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0d2ec5532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identity=36103 ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8h5zl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c0e7028fc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=818 identity=8358 ipv4=10.0.0.243 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cgln6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c0e7028fc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=818 identity=8358 ipv4=10.0.0.243 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cgln6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c0d2ec5532 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2345 identity=36103 ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8h5zl subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0d2ec5532 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2345 identity=36103 ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8h5zl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.221 224650d1-9286-4a9c-9b0e-5108cc88ba93 default }" containerID=353c62136d31f33dc6cd3654966fc5e620a4a2b56f796e1db2004fb4698a7e1b datapathConfiguration="&{false false false false false }" interface=lxce5e716205a7e k8sPodName=cert-manager/cert-manager-startupapicheck-xf6vw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=353c62136d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xf6vw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=353c62136d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=9c3eef8b-9c50-441f-b951-aecf49eb4e35,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=9c3eef8b-9c50-441f-b951-aecf49eb4e35,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xf6vw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=9c3eef8b-9c50-441f-b951-aecf49eb4e35;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=9c3eef8b-9c50-441f-b951-aecf49eb4e35;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=353c62136d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 identity=38208 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=9c3eef8b-9c50-441f-b951-aecf49eb4e35,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=9c3eef8b-9c50-441f-b951-aecf49eb4e35,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xf6vw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=353c62136d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 identity=38208 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xf6vw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=353c62136d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=399 identity=38208 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xf6vw subsys=endpoint level=info msg="Successful endpoint creation" containerID=353c62136d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=399 identity=38208 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xf6vw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=353c62136d endpointID=399 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-xf6vw subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=9c3eef8b-9c50-441f-b951-aecf49eb4e35 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=9c3eef8b-9c50-441f-b951-aecf49eb4e35 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=353c62136d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=399 identity=38208 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xf6vw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 6ef89f1e-bfcb-45ad-9f40-84c35913b0d4 default }" containerID=86919e2bb774d67e95eab25719eaadca6ccdb0465c80d3f7ff8eb4f2b524c6f6 datapathConfiguration="&{false false false false false }" interface=lxc4e20d25926a3 k8sPodName=ingress-nginx/ingress-nginx-admission-create-r2tb4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86919e2bb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-r2tb4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86919e2bb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8c023ab0-90f9-42b3-9d5f-345f69e88363,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=8c023ab0-90f9-42b3-9d5f-345f69e88363,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-r2tb4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=8c023ab0-90f9-42b3-9d5f-345f69e88363;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=8c023ab0-90f9-42b3-9d5f-345f69e88363;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86919e2bb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identity=2498 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8c023ab0-90f9-42b3-9d5f-345f69e88363,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=8c023ab0-90f9-42b3-9d5f-345f69e88363,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-r2tb4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86919e2bb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identity=2498 ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-r2tb4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=86919e2bb7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=5 identity=2498 ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-r2tb4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=86919e2bb7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=5 identity=2498 ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-r2tb4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=86919e2bb7 endpointID=5 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-r2tb4 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=8c023ab0-90f9-42b3-9d5f-345f69e88363 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=8c023ab0-90f9-42b3-9d5f-345f69e88363 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=86919e2bb7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=5 identity=2498 ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-r2tb4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 6c692d1d-606c-42fa-9183-65220ed0fcc4 default }" containerID=b6ed30c704bd4761e2d4a7f96b8b9a3d862da9cb4aa607aa6f090e92215f112f datapathConfiguration="&{false false false false false }" interface=lxc6ac3407fa3cb k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dhvrl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6ed30c704 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2076 ipv4=10.0.0.221 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dhvrl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6ed30c704 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2076 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.221 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dhvrl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6ed30c704 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2076 identity=16311 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.221 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dhvrl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6ed30c704 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2076 identity=16311 ipv4=10.0.0.221 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dhvrl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b6ed30c704 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2076 identity=16311 ipv4=10.0.0.221 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dhvrl subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6ed30c704 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2076 identity=16311 ipv4=10.0.0.221 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dhvrl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.68 ef04bc0c-a43d-4f4e-abb5-d9c7020d82a7 default }" containerID=b8d0178f9235cfa97761e1fac8cc136e20ccadaff2f3d1a1c27d73cead6c951e datapathConfiguration="&{false false false false false }" interface=lxcdf6caaf0083e k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sp7hg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8d0178f92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sp7hg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8d0178f92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=17a59177-37b1-455b-8f16-1cab5d38e400,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=17a59177-37b1-455b-8f16-1cab5d38e400,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sp7hg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=17a59177-37b1-455b-8f16-1cab5d38e400;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=17a59177-37b1-455b-8f16-1cab5d38e400;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8d0178f92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identity=25694 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=17a59177-37b1-455b-8f16-1cab5d38e400,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=17a59177-37b1-455b-8f16-1cab5d38e400,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sp7hg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8d0178f92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identity=25694 ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sp7hg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8d0178f92 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1770 identity=25694 ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sp7hg subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8d0178f92 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1770 identity=25694 ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sp7hg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b8d0178f92 endpointID=1770 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-sp7hg subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=17a59177-37b1-455b-8f16-1cab5d38e400 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=17a59177-37b1-455b-8f16-1cab5d38e400 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=b8d0178f92 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1770 identity=25694 ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sp7hg subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ae13323d-661b-46dc-a80f-36649fd24ce8] Description:}]" policyAddRequest=d2686ac7-bdd6-48fe-b660-c8d587ceecad subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d2686ac7-bdd6-48fe-b660-c8d587ceecad policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=b349aeb0-1792-4fdd-952e-4954b942da43] Description:}]" policyAddRequest=2744ab02-bfa1-4a1c-ab54-25d48274d847 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=2744ab02-bfa1-4a1c-ab54-25d48274d847 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.249 d3b069e2-a2dd-4686-9391-15eb014b4fb1 default }" containerID=26b475f21a3d84979422de4dfe573a04e7b3bf2ed0bf053817ff4cb2a6b9412e datapathConfiguration="&{false false false false false }" interface=lxcb9035661025d k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ztrq6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26b475f21a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=921 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ztrq6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26b475f21a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=921 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ztrq6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=26b475f21a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=921 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ztrq6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26b475f21a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=921 identity=38868 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ztrq6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26b475f21a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=921 identity=38868 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ztrq6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26b475f21a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=921 identity=38868 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ztrq6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=26b475f21a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=921 identity=38868 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ztrq6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.50 65e371ec-5b9d-4e39-b8bb-9d206f7abb1f default }" containerID=c168ec4a7dfb29b68a92ca7580621a873bdb9ec2c42a8d2edf95a3187eeba3bd datapathConfiguration="&{false false false false false }" interface=lxce968ae08d1bd k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-k4f8s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c168ec4a7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-k4f8s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c168ec4a7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-k4f8s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c168ec4a7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=45097 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-k4f8s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c168ec4a7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=45097 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-k4f8s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c168ec4a7d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=56 identity=45097 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-k4f8s subsys=endpoint level=info msg="Successful endpoint creation" containerID=c168ec4a7d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=56 identity=45097 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-k4f8s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.182 589afc59-a72a-4700-abc6-761b04e1bb3c default }" containerID=94c01911c7e8b89df1466a56dac6cf2d592d552632348c11b29755a6ff3ab96e datapathConfiguration="&{false false false false false }" interface=lxc67657abadcd0 k8sPodName=openstack/pxc-operator-7cff949c8b-f8966 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94c01911c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-f8966 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94c01911c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-f8966 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=94c01911c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-f8966 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=94c01911c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identity=45601 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-f8966 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94c01911c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identity=45601 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-f8966 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94c01911c7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=148 identity=45601 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-f8966 subsys=endpoint level=info msg="Successful endpoint creation" containerID=94c01911c7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=148 identity=45601 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-f8966 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.38 fd736f44-be8c-4a35-aaff-2351b1ce90ce default }" containerID=35fb72784c43f0e14ef2d31de6cdd4fdffc84cfe2fdc78dc918210e6eb0b191b datapathConfiguration="&{false false false false false }" interface=lxc5e87365a8557 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35fb72784c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35fb72784c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=35fb72784c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.38 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35fb72784c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=41914 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35fb72784c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=41914 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35fb72784c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=292 identity=41914 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=35fb72784c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=292 identity=41914 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.5 fdbae706-dbdc-467a-a459-c08e8e723584 default }" containerID=68625dd3faf3f1fd10fa9c7272de99abd03b6488299882105f65a8d7020ae905 datapathConfiguration="&{false false false false false }" interface=lxc079705f88de8 k8sPodName=local-path-storage/helper-pod-create-pvc-8473cf0c-392c-4fd5-a474-cf75faf85aca labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68625dd3fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8473cf0c-392c-4fd5-a474-cf75faf85aca subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68625dd3fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8473cf0c-392c-4fd5-a474-cf75faf85aca subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68625dd3fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identity=3591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8473cf0c-392c-4fd5-a474-cf75faf85aca oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68625dd3fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identity=3591 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8473cf0c-392c-4fd5-a474-cf75faf85aca subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68625dd3fa datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1244 identity=3591 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8473cf0c-392c-4fd5-a474-cf75faf85aca subsys=endpoint level=info msg="Successful endpoint creation" containerID=68625dd3fa datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1244 identity=3591 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8473cf0c-392c-4fd5-a474-cf75faf85aca subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68625dd3fa endpointID=1244 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8473cf0c-392c-4fd5-a474-cf75faf85aca subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=68625dd3fa datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1244 identity=3591 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8473cf0c-392c-4fd5-a474-cf75faf85aca subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 2a681236-2130-434b-8895-5163986744ee default }" containerID=f479c9a52d163397fde9bb8427444da4d334fe5c42b0d63d2dcf59c29808f28f datapathConfiguration="&{false false false false false }" interface=lxc629e37800228 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f479c9a52d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3809 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f479c9a52d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3809 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f479c9a52d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3809 identity=50525 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f479c9a52d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3809 identity=50525 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f479c9a52d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3809 identity=50525 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f479c9a52d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3809 identity=50525 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=13542a50-5605-42e2-be88-35656daf67a7] Description:}]" policyAddRequest=ee9f8162-a085-4c8d-ae42-d5465d867446 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=ee9f8162-a085-4c8d-ae42-d5465d867446 policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.167 f5a76a17-0a0f-4b87-ae26-ba87cd7a368e default }" containerID=cc60e9ee6321316c836d8d543fc55e2fb3e6543dda9f1bd358670e86860a28e3 datapathConfiguration="&{false false false false false }" interface=lxc2377de5e949e k8sPodName=local-path-storage/helper-pod-create-pvc-25f400b2-e6a8-4123-af8c-583fa97e1a25 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc60e9ee63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25f400b2-e6a8-4123-af8c-583fa97e1a25 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc60e9ee63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25f400b2-e6a8-4123-af8c-583fa97e1a25 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc60e9ee63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identity=3591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25f400b2-e6a8-4123-af8c-583fa97e1a25 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc60e9ee63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identity=3591 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25f400b2-e6a8-4123-af8c-583fa97e1a25 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc60e9ee63 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=352 identity=3591 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25f400b2-e6a8-4123-af8c-583fa97e1a25 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc60e9ee63 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=352 identity=3591 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25f400b2-e6a8-4123-af8c-583fa97e1a25 subsys=daemon level=info msg="Delete endpoint request" containerID=cc60e9ee63 endpointID=352 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-25f400b2-e6a8-4123-af8c-583fa97e1a25 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cc60e9ee63 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=352 identity=3591 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25f400b2-e6a8-4123-af8c-583fa97e1a25 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 5f8f92f4-6382-49f0-92c7-37fee3c765b4 default }" containerID=8c5608a582848b46992fd62ed144e4651f1e1e385568480134807fc052d72b17 datapathConfiguration="&{false false false false false }" interface=lxcc20f7a8550fd k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c5608a582 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c5608a582 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c5608a582 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 identity=5918 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c5608a582 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 identity=5918 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8c5608a582 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3236 identity=5918 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c5608a582 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3236 identity=5918 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=520abf9f-fd5c-49a8-a7d1-42e9ce5abc41] Description:}]" policyAddRequest=95b4e061-8209-42f8-b2ec-783f8f54e013 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=95b4e061-8209-42f8-b2ec-783f8f54e013 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.8 9808cb2a-7f27-49e7-842e-b8913b70b6a7 default }" containerID=04f1a9ff4e07086e8c5291da28a8ed158c66db1202d7086665906a3e0afe75e9 datapathConfiguration="&{false false false false false }" interface=lxc8eb2170d1a42 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04f1a9ff4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 ipv4=10.0.0.8 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04f1a9ff4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.8 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=04f1a9ff4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.8 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04f1a9ff4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identity=40309 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.8 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04f1a9ff4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identity=40309 ipv4=10.0.0.8 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04f1a9ff4e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=92 identity=40309 ipv4=10.0.0.8 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=04f1a9ff4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=92 identity=40309 ipv4=10.0.0.8 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010145143181787438 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.46 ab936e96-1ece-4f4c-8851-f1ff6879e715 default }" containerID=9b4320e4df57a8e87587a730fc54ba0652aa05dfef8344ef0809efdb8f15452c datapathConfiguration="&{false false false false false }" interface=lxc5aaf4407be38 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-chrhr labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.170 bfddd5ae-8b54-4db1-b558-0de784b8650c default }" containerID=6ea3151855852a3c1a9e56abb0a902c5030de8b17b7aea965b016747cc922a71 datapathConfiguration="&{false false false false false }" interface=lxcde4680a0e228 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rlgd9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b4320e4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-chrhr subsys=endpoint level=info msg="New endpoint" containerID=6ea3151855 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rlgd9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b4320e4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-chrhr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=6ea3151855 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rlgd9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 6571ceb1-34ff-4e27-8689-730c6e6c73ff default }" containerID=3637e65b4c7f452b7aa642724addf9890ae664917d59bc9842111ce6cca22b49 datapathConfiguration="&{false false false false false }" interface=lxc74a77f58d577 k8sPodName=monitoring/node-feature-discovery-worker-lj2wf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3637e65b4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2957 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-lj2wf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3637e65b4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2957 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-lj2wf subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b4320e4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 identity=30988 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-chrhr oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=9b4320e4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 identity=30988 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-chrhr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3637e65b4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2957 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-lj2wf line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=6ea3151855 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rlgd9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ea3151855 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 identity=865 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rlgd9 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=6ea3151855 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 identity=865 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rlgd9 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3637e65b4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2957 identity=13053 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-lj2wf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3637e65b4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2957 identity=13053 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-lj2wf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b4320e4df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2459 identity=30988 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-chrhr subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b4320e4df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2459 identity=30988 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-chrhr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6ea3151855 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=968 identity=865 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rlgd9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ea3151855 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=968 identity=865 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rlgd9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3637e65b4c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2957 identity=13053 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-lj2wf subsys=endpoint level=info msg="Successful endpoint creation" containerID=3637e65b4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2957 identity=13053 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-lj2wf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 de1de89b-119b-486b-b8f5-274ad8746565 default }" containerID=fa2e6ca948ea473fa1eff59dfebb2ce756a22316e6e4b4b6c813c23b7a5aa5a9 datapathConfiguration="&{false false false false false }" interface=lxc5876da88c10d k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rzdv5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa2e6ca948 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=539 ipv4=10.0.0.27 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rzdv5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa2e6ca948 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=539 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.27 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rzdv5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa2e6ca948 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=539 identity=8629 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.27 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rzdv5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa2e6ca948 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=539 identity=8629 ipv4=10.0.0.27 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rzdv5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa2e6ca948 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=539 identity=8629 ipv4=10.0.0.27 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rzdv5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa2e6ca948 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=539 identity=8629 ipv4=10.0.0.27 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rzdv5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=315 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00315 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00315 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00315 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00315:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=315 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 e4a27e4a-052b-4aa8-a933-80a1267c5914 default }" containerID=1347c8fe03d75f6ea1bc172122d82fa81363cb14feabcd99d4508424375bd261 datapathConfiguration="&{false false false false false }" interface=lxcd3ad9fb201c3 k8sPodName=monitoring/kube-prometheus-stack-admission-create-d85f5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1347c8fe03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d85f5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1347c8fe03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=fa7f0c74-0c2b-40af-9fba-fbc3bb9c4979,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=fa7f0c74-0c2b-40af-9fba-fbc3bb9c4979,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d85f5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=fa7f0c74-0c2b-40af-9fba-fbc3bb9c4979;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=fa7f0c74-0c2b-40af-9fba-fbc3bb9c4979;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1347c8fe03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 identity=26919 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=fa7f0c74-0c2b-40af-9fba-fbc3bb9c4979,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=fa7f0c74-0c2b-40af-9fba-fbc3bb9c4979,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d85f5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1347c8fe03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 identity=26919 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d85f5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1347c8fe03 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2898 identity=26919 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d85f5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1347c8fe03 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2898 identity=26919 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d85f5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1347c8fe03 endpointID=2898 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-d85f5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=fa7f0c74-0c2b-40af-9fba-fbc3bb9c4979 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=fa7f0c74-0c2b-40af-9fba-fbc3bb9c4979 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=1347c8fe03 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2898 identity=26919 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d85f5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 dc9e6435-189a-460a-9568-e2b2e91922eb default }" containerID=7932fe1dc967c912391a61b7a7252a53afa7aecbb8365ef73a6f6bb915e5d31c datapathConfiguration="&{false false false false false }" interface=lxce707c1b03d2f k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9nn8q labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.111 94f37c0b-cc66-4d19-bd6a-4ca1b002e4c4 default }" containerID=3a7be04866c663cee75bbd6ee7de98bbf100d0f279705b0e1df9be3a3dc24c96 datapathConfiguration="&{false false false false false }" interface=lxcdc71bef849e9 k8sPodName=monitoring/kube-prometheus-stack-grafana-5cb44d6fbc-pz24x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7932fe1dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9nn8q subsys=endpoint level=info msg="New endpoint" containerID=3a7be04866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cb44d6fbc-pz24x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a7be04866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cb44d6fbc-pz24x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=7932fe1dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9nn8q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a7be04866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 identity=4935 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cb44d6fbc-pz24x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a7be04866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 identity=4935 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cb44d6fbc-pz24x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=7932fe1dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9nn8q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7932fe1dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identity=8382 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9nn8q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7932fe1dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identity=8382 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9nn8q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 d9e7fb0c-af9b-4094-b2a8-0366b22a83ac default }" containerID=6ccab5098b509c221e9c0eb43b3a0befff172e1045b658e7e1ea53fe29e59728 datapathConfiguration="&{false false false false false }" interface=lxcaee3a2a5c1ff k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nj5v6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ccab5098b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2646 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nj5v6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ccab5098b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2646 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nj5v6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ccab5098b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2646 identity=28010 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nj5v6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ccab5098b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2646 identity=28010 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nj5v6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7932fe1dc9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1495 identity=8382 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9nn8q subsys=endpoint level=info msg="Successful endpoint creation" containerID=7932fe1dc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1495 identity=8382 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9nn8q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3a7be04866 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2907 identity=4935 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cb44d6fbc-pz24x subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a7be04866 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2907 identity=4935 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cb44d6fbc-pz24x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6ccab5098b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2646 identity=28010 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nj5v6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ccab5098b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2646 identity=28010 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nj5v6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.37 62200137-5a2a-4f8a-9c59-5f9d55cb3c11 default }" containerID=c8f214d3a9423ffb2e51253d6ae683f173f668de1fc80838d7df276c2969260b datapathConfiguration="&{false false false false false }" interface=lxc64efa662c9a8 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r8jnj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8f214d3a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r8jnj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8f214d3a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=0f1a7379-a76e-40db-ab89-f27a0e123edb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0f1a7379-a76e-40db-ab89-f27a0e123edb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r8jnj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=0f1a7379-a76e-40db-ab89-f27a0e123edb;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=0f1a7379-a76e-40db-ab89-f27a0e123edb;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8f214d3a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=31709 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=0f1a7379-a76e-40db-ab89-f27a0e123edb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0f1a7379-a76e-40db-ab89-f27a0e123edb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r8jnj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8f214d3a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=31709 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r8jnj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8f214d3a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=121 identity=31709 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r8jnj subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8f214d3a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=121 identity=31709 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r8jnj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.48 e14ea804-c24b-4f18-b5f4-db9581ef618a default }" containerID=68d26c1ed23ad23fc6a373fe4e2eefbcdfbd9d975b4737f25ad89d7cbd0261ed datapathConfiguration="&{false false false false false }" interface=lxca060bf7c8748 k8sPodName=local-path-storage/helper-pod-create-pvc-bff5cc40-0695-4783-a6d2-2644b3317dfc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68d26c1ed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bff5cc40-0695-4783-a6d2-2644b3317dfc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68d26c1ed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bff5cc40-0695-4783-a6d2-2644b3317dfc subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68d26c1ed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 identity=3591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bff5cc40-0695-4783-a6d2-2644b3317dfc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68d26c1ed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 identity=3591 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bff5cc40-0695-4783-a6d2-2644b3317dfc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 8195d706-8473-4c1f-9b9d-f78ca4c30286 default }" containerID=4dcc713717d897124193be30c84182d179e252d82f0eb78f43243755ca966cf5 datapathConfiguration="&{false false false false false }" interface=lxcb596abff5e74 k8sPodName=local-path-storage/helper-pod-create-pvc-e217b840-f2b9-4081-acd9-d650c98c5586 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dcc713717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1786 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e217b840-f2b9-4081-acd9-d650c98c5586 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dcc713717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1786 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e217b840-f2b9-4081-acd9-d650c98c5586 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4dcc713717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1786 identity=3591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e217b840-f2b9-4081-acd9-d650c98c5586 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4dcc713717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1786 identity=3591 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e217b840-f2b9-4081-acd9-d650c98c5586 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68d26c1ed2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3401 identity=3591 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bff5cc40-0695-4783-a6d2-2644b3317dfc subsys=endpoint level=info msg="Successful endpoint creation" containerID=68d26c1ed2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3401 identity=3591 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bff5cc40-0695-4783-a6d2-2644b3317dfc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4dcc713717 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1786 identity=3591 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e217b840-f2b9-4081-acd9-d650c98c5586 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dcc713717 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1786 identity=3591 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e217b840-f2b9-4081-acd9-d650c98c5586 subsys=daemon level=info msg="Delete endpoint request" containerID=c8f214d3a9 endpointID=121 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-r8jnj subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=0f1a7379-a76e-40db-ab89-f27a0e123edb k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=0f1a7379-a76e-40db-ab89-f27a0e123edb k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=c8f214d3a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=121 identity=31709 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r8jnj subsys=endpoint level=info msg="Delete endpoint request" containerID=68d26c1ed2 endpointID=3401 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bff5cc40-0695-4783-a6d2-2644b3317dfc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=4dcc713717 endpointID=1786 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e217b840-f2b9-4081-acd9-d650c98c5586 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=68d26c1ed2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3401 identity=3591 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bff5cc40-0695-4783-a6d2-2644b3317dfc subsys=endpoint level=info msg="Removed endpoint" containerID=4dcc713717 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1786 identity=3591 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e217b840-f2b9-4081-acd9-d650c98c5586 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 8c0e1b81-8e33-47b2-9309-8225f405164b default }" containerID=b53793009f67fe15b14ca4b998e56f6ce38848a204f05a7d39ac7da0a8fe22aa datapathConfiguration="&{false false false false false }" interface=lxc887b76be1eea k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b53793009f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b53793009f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b53793009f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b53793009f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 identity=1272 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b53793009f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 identity=1272 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b53793009f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3110 identity=1272 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b53793009f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3110 identity=1272 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.252 dffe940a-b169-4fd1-9153-1d43a20906f2 default }" containerID=ab6aeadaca698bc38478cb3fa754b543ea4c459fe779e32aa71073bfc06f1506 datapathConfiguration="&{false false false false false }" interface=lxc6a6a38d0d051 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab6aeadaca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab6aeadaca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab6aeadaca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=10013 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab6aeadaca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=10013 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab6aeadaca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=502 identity=10013 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab6aeadaca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=502 identity=10013 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.204 0198d037-432c-4f2e-baee-e7a6d23aedef default }" containerID=20bbb283ce9027f3cf84594d2109561ecfb20a084be2d4e09ce3889566b7b69d datapathConfiguration="&{false false false false false }" interface=lxc6967e75d360f k8sPodName=monitoring/loki-gateway-cf54cb88c-nzcqm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20bbb283ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2943 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nzcqm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20bbb283ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2943 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nzcqm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20bbb283ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2943 identity=61660 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nzcqm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20bbb283ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2943 identity=61660 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nzcqm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20bbb283ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2943 identity=61660 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nzcqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=20bbb283ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2943 identity=61660 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nzcqm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.242 588321e3-7c11-41a9-bbd3-7605ffe76f7e default }" containerID=0994adc2b3ce50191033f44dd34e2b474d1321979ff68da0a47657bbc3923b13 datapathConfiguration="&{false false false false false }" interface=lxc941bb7c66a5d k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0994adc2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0994adc2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.112 f6969b0f-d825-4d92-ba3d-d77f41df44d7 default }" containerID=bbcff7762fed06d8ce9b563a78ddfc4fc269795b621c28961e4596f2eee51450 datapathConfiguration="&{false false false false false }" interface=lxca92abc648bb7 k8sPodName=local-path-storage/helper-pod-create-pvc-6e61a7d9-05d1-436e-8987-b67fe629d94f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbcff7762f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e61a7d9-05d1-436e-8987-b67fe629d94f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbcff7762f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e61a7d9-05d1-436e-8987-b67fe629d94f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 aa45e74f-4439-430a-9d2a-11ef02be4c02 default }" containerID=b8b94f91acb1bef8c7a7513d1c103932e583fcbc4a8cf67e8836591f7d4eeda3 datapathConfiguration="&{false false false false false }" interface=lxcfc690615a9ce k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8b94f91ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8b94f91ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0994adc2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identity=24363 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0994adc2b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identity=24363 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bbcff7762f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identity=3591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e61a7d9-05d1-436e-8987-b67fe629d94f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbcff7762f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identity=3591 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e61a7d9-05d1-436e-8987-b67fe629d94f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8b94f91ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=10922 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8b94f91ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=10922 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0994adc2b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=96 identity=24363 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0994adc2b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=96 identity=24363 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b8b94f91ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=776 identity=10922 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8b94f91ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=776 identity=10922 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bbcff7762f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1183 identity=3591 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e61a7d9-05d1-436e-8987-b67fe629d94f subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbcff7762f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1183 identity=3591 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e61a7d9-05d1-436e-8987-b67fe629d94f subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.113 d7cc64e4-7035-40e9-8da2-56c821b7f22c default }" containerID=824186a31aa824f3a5090598af225c1338565987560743b02d1dfc7d2f345051 datapathConfiguration="&{false false false false false }" interface=lxcae6ba8913e7d k8sPodName=monitoring/vector-zskxn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=824186a31a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/vector-zskxn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=824186a31a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/vector-zskxn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=824186a31a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identity=35556 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/vector-zskxn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=824186a31a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identity=35556 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/vector-zskxn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=824186a31a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=196 identity=35556 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/vector-zskxn subsys=endpoint level=info msg="Successful endpoint creation" containerID=824186a31a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=196 identity=35556 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/vector-zskxn subsys=daemon level=info msg="Delete endpoint request" containerID=bbcff7762f endpointID=1183 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6e61a7d9-05d1-436e-8987-b67fe629d94f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bbcff7762f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1183 identity=3591 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e61a7d9-05d1-436e-8987-b67fe629d94f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.20 401a4fa1-1cdc-4ce9-91cc-48462f5a2e12 default }" containerID=9615419af6cda8235b8031fc0b37eb40ee0f61d95aec3691436abfe2d58b2f16 datapathConfiguration="&{false false false false false }" interface=lxcec7466fbdcf2 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9615419af6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9615419af6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9615419af6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=31264 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9615419af6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=31264 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9615419af6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=405 identity=31264 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9615419af6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=405 identity=31264 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.191 9c7a3193-cf91-4e4a-871d-90876bbd8256 default }" containerID=876c6008e74b3385147143a7f723944ee846ad61e91bc5e72d08f23221ce6ae3 datapathConfiguration="&{false false false false false }" interface=lxce1bf2dabe6f6 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ftt69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=876c6008e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ftt69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=876c6008e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ftt69 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=876c6008e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ftt69 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=876c6008e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=8877 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ftt69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=876c6008e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=8877 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ftt69 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=876c6008e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1092 identity=8877 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ftt69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=876c6008e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1092 identity=8877 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ftt69 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 10df5fe3-f17f-4eaa-9975-96d2bc87b523 default }" containerID=09552b4202f1024139fe3f4e41285ae259c920b11c81522a4bec57bbcb510d42 datapathConfiguration="&{false false false false false }" interface=lxc8a008cc59d0e k8sPodName=openstack/memcached-memcached-6479589586-hnpmp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09552b4202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hnpmp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09552b4202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hnpmp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=09552b4202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identity=25387 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hnpmp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09552b4202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identity=25387 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hnpmp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09552b4202 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3361 identity=25387 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hnpmp subsys=endpoint level=info msg="Successful endpoint creation" containerID=09552b4202 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3361 identity=25387 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hnpmp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.4 4004dcd0-bdcf-46a1-ae92-2ea5a14ab708 default }" containerID=191fa67293bea6b1974816bd71906a500efed09712a022d727b643c2910c7bef datapathConfiguration="&{false false false false false }" interface=lxc8b5c612858a3 k8sPodName=local-path-storage/helper-pod-create-pvc-e499661e-3264-41f3-80b8-bbc596c25b0f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=191fa67293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e499661e-3264-41f3-80b8-bbc596c25b0f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=191fa67293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e499661e-3264-41f3-80b8-bbc596c25b0f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=191fa67293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=3591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e499661e-3264-41f3-80b8-bbc596c25b0f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=191fa67293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=3591 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e499661e-3264-41f3-80b8-bbc596c25b0f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=191fa67293 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=10 identity=3591 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e499661e-3264-41f3-80b8-bbc596c25b0f subsys=endpoint level=info msg="Successful endpoint creation" containerID=191fa67293 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=10 identity=3591 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e499661e-3264-41f3-80b8-bbc596c25b0f subsys=daemon level=info msg="Delete endpoint request" containerID=191fa67293 endpointID=10 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e499661e-3264-41f3-80b8-bbc596c25b0f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=191fa67293 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=10 identity=3591 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e499661e-3264-41f3-80b8-bbc596c25b0f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 0c178f7b-cb6a-46a7-b066-999aafaa51a7 default }" containerID=4d87d31cf31a991d7641e6c2ebb7b97d337de024108d13c658b33a2d12f6dc9a datapathConfiguration="&{false false false false false }" interface=lxc0bf5e64b0b3c k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d87d31cf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3371 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d87d31cf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3371 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4d87d31cf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3371 identity=22501 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d87d31cf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3371 identity=22501 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d87d31cf3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3371 identity=22501 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d87d31cf3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3371 identity=22501 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.138 b3238b66-d5ba-4463-802f-53ac0ca29e76 default }" containerID=9e5d28022de6d16e0be3a3ef532c51aeb962e4db40b630a85b04978ad32dd861 datapathConfiguration="&{false false false false false }" interface=lxc173b273ef308 k8sPodName=openstack/keystone-api-77c5c656cd-x8fkz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e5d28022d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2397 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-api-77c5c656cd-x8fkz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e5d28022d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2397 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-api-77c5c656cd-x8fkz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e5d28022d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2397 identity=52551 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-api-77c5c656cd-x8fkz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e5d28022d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2397 identity=52551 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-api-77c5c656cd-x8fkz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.79 db0759f1-c949-4672-908b-9fd78eb7ce44 default }" containerID=98759c1da88bdf2fab75f199e7320a1160c2861cae205790e6a4e1146d7d5e2a datapathConfiguration="&{false false false false false }" interface=lxc149f93e398bc k8sPodName=openstack/keystone-credential-setup-dvzw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98759c1da8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-credential-setup-dvzw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98759c1da8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=538a69d6-f998-474e-8463-07fa65545b3f,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=538a69d6-f998-474e-8463-07fa65545b3f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-credential-setup-dvzw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=538a69d6-f998-474e-8463-07fa65545b3f;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=538a69d6-f998-474e-8463-07fa65545b3f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98759c1da8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 identity=3929 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=538a69d6-f998-474e-8463-07fa65545b3f,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=538a69d6-f998-474e-8463-07fa65545b3f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-credential-setup-dvzw4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98759c1da8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 identity=3929 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-credential-setup-dvzw4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e5d28022d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2397 identity=52551 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-api-77c5c656cd-x8fkz subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e5d28022d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2397 identity=52551 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-api-77c5c656cd-x8fkz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=98759c1da8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3871 identity=3929 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-credential-setup-dvzw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=98759c1da8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3871 identity=3929 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-credential-setup-dvzw4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=98759c1da8 endpointID=3871 k8sNamespace=openstack k8sPodName=keystone-credential-setup-dvzw4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=538a69d6-f998-474e-8463-07fa65545b3f k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=538a69d6-f998-474e-8463-07fa65545b3f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=98759c1da8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3871 identity=3929 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-credential-setup-dvzw4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 374ece2b-e000-4736-95d3-36856df02536 default }" containerID=6eef0ff64eae366733cef833dd3f8edc3841b30ffb89b53778fc2fcd61b4c6bc datapathConfiguration="&{false false false false false }" interface=lxc08caff0318fb k8sPodName=openstack/keystone-db-init-4wrhd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6eef0ff64e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-4wrhd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6eef0ff64e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=28e2a422-62e7-4a63-bf11-e24f14c8738a,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=28e2a422-62e7-4a63-bf11-e24f14c8738a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-4wrhd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=28e2a422-62e7-4a63-bf11-e24f14c8738a;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=28e2a422-62e7-4a63-bf11-e24f14c8738a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6eef0ff64e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-4wrhd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6eef0ff64e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 identity=20234 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=28e2a422-62e7-4a63-bf11-e24f14c8738a,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=28e2a422-62e7-4a63-bf11-e24f14c8738a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-4wrhd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6eef0ff64e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 identity=20234 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-4wrhd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6eef0ff64e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3917 identity=20234 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-4wrhd subsys=endpoint level=info msg="Successful endpoint creation" containerID=6eef0ff64e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3917 identity=20234 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-4wrhd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6eef0ff64e endpointID=3917 k8sNamespace=openstack k8sPodName=keystone-db-init-4wrhd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=28e2a422-62e7-4a63-bf11-e24f14c8738a k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=28e2a422-62e7-4a63-bf11-e24f14c8738a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6eef0ff64e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3917 identity=20234 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-4wrhd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 9d2610b6-9028-43f3-924d-d61d946d449b default }" containerID=ff2ee81400b427631e5ed88a8f6c38e89723995ceb90da59aa766a1aa91e9db5 datapathConfiguration="&{false false false false false }" interface=lxc39ba0e05a4de k8sPodName=openstack/keystone-fernet-setup-j2n9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff2ee81400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-fernet-setup-j2n9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff2ee81400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1380d70d-51b5-442a-a2df-24f5adaad4be,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=1380d70d-51b5-442a-a2df-24f5adaad4be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-fernet-setup-j2n9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1380d70d-51b5-442a-a2df-24f5adaad4be;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=1380d70d-51b5-442a-a2df-24f5adaad4be;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff2ee81400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identity=44651 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1380d70d-51b5-442a-a2df-24f5adaad4be,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=1380d70d-51b5-442a-a2df-24f5adaad4be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-fernet-setup-j2n9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff2ee81400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identity=44651 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-fernet-setup-j2n9s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ff2ee81400 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1235 identity=44651 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-fernet-setup-j2n9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff2ee81400 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1235 identity=44651 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-fernet-setup-j2n9s subsys=daemon level=info msg="Delete endpoint request" containerID=ff2ee81400 endpointID=1235 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-j2n9s subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1380d70d-51b5-442a-a2df-24f5adaad4be k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=1380d70d-51b5-442a-a2df-24f5adaad4be k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ff2ee81400 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1235 identity=44651 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-fernet-setup-j2n9s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 603b69d4-58af-40ef-b66a-a3810b8f6558 default }" containerID=780642b48c24f88ec85fa2f3ba53e6fb7ffc4a5c4eb58531e0075d5acde4038e datapathConfiguration="&{false false false false false }" interface=lxc5f785ab9e492 k8sPodName=openstack/keystone-db-sync-l2gmv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=780642b48c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-db-sync-l2gmv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=780642b48c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f99c4770-bb0e-4d1e-82ed-1865d252f03d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=f99c4770-bb0e-4d1e-82ed-1865d252f03d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-db-sync-l2gmv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f99c4770-bb0e-4d1e-82ed-1865d252f03d;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=f99c4770-bb0e-4d1e-82ed-1865d252f03d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=780642b48c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identity=34427 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f99c4770-bb0e-4d1e-82ed-1865d252f03d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=f99c4770-bb0e-4d1e-82ed-1865d252f03d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-db-sync-l2gmv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=780642b48c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identity=34427 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-db-sync-l2gmv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=780642b48c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=902 identity=34427 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-db-sync-l2gmv subsys=endpoint level=info msg="Successful endpoint creation" containerID=780642b48c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=902 identity=34427 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-db-sync-l2gmv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=780642b48c endpointID=902 k8sNamespace=openstack k8sPodName=keystone-db-sync-l2gmv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f99c4770-bb0e-4d1e-82ed-1865d252f03d k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=f99c4770-bb0e-4d1e-82ed-1865d252f03d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=780642b48c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=902 identity=34427 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-db-sync-l2gmv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 546aa57f-9940-4988-9885-5d2a8609b45f default }" containerID=c6b6857ebb686402a6f62bdff3f3d8f9fd3c4da99a63f91cc8f1b4a0f133b4dd datapathConfiguration="&{false false false false false }" interface=lxcbe7e308ef9f9 k8sPodName=openstack/keystone-rabbit-init-l7947 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6b6857ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-rabbit-init-l7947 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6b6857ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=78afd0e6-626f-4cd3-8281-e0a7a5f214f0,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=78afd0e6-626f-4cd3-8281-e0a7a5f214f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-rabbit-init-l7947 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=78afd0e6-626f-4cd3-8281-e0a7a5f214f0;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=78afd0e6-626f-4cd3-8281-e0a7a5f214f0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6b6857ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 identity=10559 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=78afd0e6-626f-4cd3-8281-e0a7a5f214f0,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=78afd0e6-626f-4cd3-8281-e0a7a5f214f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-rabbit-init-l7947 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6b6857ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=775 identity=10559 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-rabbit-init-l7947 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c6b6857ebb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=775 identity=10559 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-rabbit-init-l7947 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6b6857ebb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=775 identity=10559 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-rabbit-init-l7947 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c6b6857ebb endpointID=775 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-l7947 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=78afd0e6-626f-4cd3-8281-e0a7a5f214f0 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=78afd0e6-626f-4cd3-8281-e0a7a5f214f0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c6b6857ebb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=775 identity=10559 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-rabbit-init-l7947 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 62314b20-a001-4933-8f63-6fc26757841f default }" containerID=525d3ed468d958e8478a1801c7efd5cf5581faf208fecda50bbc810a7a8ea7c5 datapathConfiguration="&{false false false false false }" interface=lxca8c54b015690 k8sPodName=openstack/keystone-domain-manage-pgncj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=525d3ed468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-domain-manage-pgncj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=525d3ed468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b11a9e59-0e23-4e38-965d-ca5f2e8cc63a,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=b11a9e59-0e23-4e38-965d-ca5f2e8cc63a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-domain-manage-pgncj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=525d3ed468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-domain-manage-pgncj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b11a9e59-0e23-4e38-965d-ca5f2e8cc63a;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=b11a9e59-0e23-4e38-965d-ca5f2e8cc63a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=525d3ed468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=51879 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b11a9e59-0e23-4e38-965d-ca5f2e8cc63a,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=b11a9e59-0e23-4e38-965d-ca5f2e8cc63a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-domain-manage-pgncj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=525d3ed468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=51879 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-domain-manage-pgncj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=525d3ed468 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=512 identity=51879 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-domain-manage-pgncj subsys=endpoint level=info msg="Successful endpoint creation" containerID=525d3ed468 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=512 identity=51879 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-domain-manage-pgncj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=525d3ed468 endpointID=512 k8sNamespace=openstack k8sPodName=keystone-domain-manage-pgncj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b11a9e59-0e23-4e38-965d-ca5f2e8cc63a k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=b11a9e59-0e23-4e38-965d-ca5f2e8cc63a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=525d3ed468 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=512 identity=51879 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-domain-manage-pgncj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 3908f4fc-5f94-4ba4-a262-766e5ccb1e45 default }" containerID=970b429a86d776c38ff5013f8eb51dbfa2208691e3a1aa159b40c26896c96eac datapathConfiguration="&{false false false false false }" interface=lxc66d23a23d116 k8sPodName=openstack/keystone-bootstrap-l48pf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=970b429a86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-bootstrap-l48pf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=970b429a86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=65db774c-f250-4f69-8050-8bc51705ed93,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=65db774c-f250-4f69-8050-8bc51705ed93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-bootstrap-l48pf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=65db774c-f250-4f69-8050-8bc51705ed93;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=65db774c-f250-4f69-8050-8bc51705ed93;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=970b429a86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 identity=613 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=65db774c-f250-4f69-8050-8bc51705ed93,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=65db774c-f250-4f69-8050-8bc51705ed93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-bootstrap-l48pf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=970b429a86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 identity=613 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-bootstrap-l48pf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=970b429a86 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3586 identity=613 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-bootstrap-l48pf subsys=endpoint level=info msg="Successful endpoint creation" containerID=970b429a86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3586 identity=613 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-bootstrap-l48pf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=970b429a86 endpointID=3586 k8sNamespace=openstack k8sPodName=keystone-bootstrap-l48pf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=65db774c-f250-4f69-8050-8bc51705ed93 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=65db774c-f250-4f69-8050-8bc51705ed93 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=970b429a86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3586 identity=613 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-bootstrap-l48pf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 4f100825-6d98-4848-b665-cdba0c319cde default }" containerID=652212b35ea191e97a98e824685cc1c2693feaab07fe6b4ed079517ad245add1 datapathConfiguration="&{false false false false false }" interface=lxc97061eb5efab k8sPodName=local-path-storage/helper-pod-create-pvc-56b8c683-92fb-447e-b5bd-1cbdd0478cbf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=652212b35e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56b8c683-92fb-447e-b5bd-1cbdd0478cbf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=652212b35e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56b8c683-92fb-447e-b5bd-1cbdd0478cbf subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=652212b35e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identity=3591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56b8c683-92fb-447e-b5bd-1cbdd0478cbf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=652212b35e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identity=3591 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56b8c683-92fb-447e-b5bd-1cbdd0478cbf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=652212b35e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=556 identity=3591 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56b8c683-92fb-447e-b5bd-1cbdd0478cbf subsys=endpoint level=info msg="Successful endpoint creation" containerID=652212b35e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=556 identity=3591 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56b8c683-92fb-447e-b5bd-1cbdd0478cbf subsys=daemon level=info msg="Delete endpoint request" containerID=652212b35e endpointID=556 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-56b8c683-92fb-447e-b5bd-1cbdd0478cbf subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=652212b35e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=556 identity=3591 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56b8c683-92fb-447e-b5bd-1cbdd0478cbf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 41e8375c-4e7a-43e5-8222-6c45e46870c2 default }" containerID=01012415879b3c4c80c7de12b83d9807a9d8d9f401f8fcd408fc3b497ae6edc2 datapathConfiguration="&{false false false false false }" interface=lxce678b44dbd1f k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0101241587 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0101241587 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0101241587 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 identity=15271 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0101241587 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 identity=15271 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0101241587 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2947 identity=15271 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0101241587 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2947 identity=15271 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.61 5a4c64b4-54b4-4312-8d96-c7fcc1341a42 default }" containerID=0e0913c67d3da5adcda8c16fd09aa71ecffa0cff856d2eea7a33be99eb40d96e datapathConfiguration="&{false false false false false }" interface=lxcbf1eb893693b k8sPodName=openstack/barbican-api-8f54cc6c9-pbngg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e0913c67d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-api-8f54cc6c9-pbngg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e0913c67d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-api-8f54cc6c9-pbngg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0e0913c67d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-api-8f54cc6c9-pbngg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e0913c67d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 identity=12644 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-api-8f54cc6c9-pbngg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e0913c67d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 identity=12644 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-api-8f54cc6c9-pbngg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 ec02029e-b330-4e3b-8458-4a38adf8ac39 default }" containerID=b3337d126aeace263cf7dae38d376813ef0e2319cc5a7e28aa9f29e62cd3157a datapathConfiguration="&{false false false false false }" interface=lxce23aae133af0 k8sPodName=openstack/barbican-db-init-w6zww labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3337d126a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-db-init-w6zww subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3337d126a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1974c565-757a-43c1-9c18-c280f78c8dbf,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=1974c565-757a-43c1-9c18-c280f78c8dbf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-db-init-w6zww subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1974c565-757a-43c1-9c18-c280f78c8dbf;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=1974c565-757a-43c1-9c18-c280f78c8dbf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3337d126a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identity=9915 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1974c565-757a-43c1-9c18-c280f78c8dbf,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=1974c565-757a-43c1-9c18-c280f78c8dbf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-db-init-w6zww oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3337d126a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identity=9915 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-db-init-w6zww subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e0913c67d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=924 identity=12644 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-api-8f54cc6c9-pbngg subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e0913c67d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=924 identity=12644 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-api-8f54cc6c9-pbngg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b3337d126a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=655 identity=9915 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-db-init-w6zww subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3337d126a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=655 identity=9915 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-db-init-w6zww subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b3337d126a endpointID=655 k8sNamespace=openstack k8sPodName=barbican-db-init-w6zww subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1974c565-757a-43c1-9c18-c280f78c8dbf k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=1974c565-757a-43c1-9c18-c280f78c8dbf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b3337d126a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=655 identity=9915 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-db-init-w6zww subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 40d555e8-675b-4b44-88b7-fc990cf929f0 default }" containerID=b06f5f35d05fb11cf69696d51ceee99ebcc3711cb26ecd3f75a14d8e4a3afda7 datapathConfiguration="&{false false false false false }" interface=lxc905ad968caca k8sPodName=openstack/barbican-db-sync-t7thg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b06f5f35d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-db-sync-t7thg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b06f5f35d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9305c575-40f2-4c7f-8ebb-3e4097ec4cc5,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9305c575-40f2-4c7f-8ebb-3e4097ec4cc5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-db-sync-t7thg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b06f5f35d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-db-sync-t7thg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9305c575-40f2-4c7f-8ebb-3e4097ec4cc5;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=9305c575-40f2-4c7f-8ebb-3e4097ec4cc5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b06f5f35d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 identity=19593 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9305c575-40f2-4c7f-8ebb-3e4097ec4cc5,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9305c575-40f2-4c7f-8ebb-3e4097ec4cc5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-db-sync-t7thg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b06f5f35d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 identity=19593 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-db-sync-t7thg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b06f5f35d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1579 identity=19593 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-db-sync-t7thg subsys=endpoint level=info msg="Successful endpoint creation" containerID=b06f5f35d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1579 identity=19593 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-db-sync-t7thg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03594762400746682 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=b06f5f35d0 endpointID=1579 k8sNamespace=openstack k8sPodName=barbican-db-sync-t7thg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9305c575-40f2-4c7f-8ebb-3e4097ec4cc5 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=9305c575-40f2-4c7f-8ebb-3e4097ec4cc5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b06f5f35d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1579 identity=19593 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-db-sync-t7thg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 fcace323-03b2-4d47-8c7b-04f9a40076e4 default }" containerID=8550286ba71f5b631e535d895e1409a72b001eca2fce31af13670ea8c77906c4 datapathConfiguration="&{false false false false false }" interface=lxccfc71d3b70ca k8sPodName=openstack/barbican-rabbit-init-9nx22 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8550286ba7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-rabbit-init-9nx22 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8550286ba7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4a7614bb-4ba8-4d9c-8377-7078429a9fbe,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4a7614bb-4ba8-4d9c-8377-7078429a9fbe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-rabbit-init-9nx22 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4a7614bb-4ba8-4d9c-8377-7078429a9fbe;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4a7614bb-4ba8-4d9c-8377-7078429a9fbe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8550286ba7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identity=28760 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4a7614bb-4ba8-4d9c-8377-7078429a9fbe,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4a7614bb-4ba8-4d9c-8377-7078429a9fbe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-rabbit-init-9nx22 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8550286ba7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identity=28760 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-rabbit-init-9nx22 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8550286ba7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=154 identity=28760 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-rabbit-init-9nx22 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8550286ba7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=154 identity=28760 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-rabbit-init-9nx22 subsys=daemon level=info msg="Delete endpoint request" containerID=8550286ba7 endpointID=154 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-9nx22 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4a7614bb-4ba8-4d9c-8377-7078429a9fbe k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4a7614bb-4ba8-4d9c-8377-7078429a9fbe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8550286ba7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=154 identity=28760 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-rabbit-init-9nx22 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 df96e863-4ca0-4e42-8bae-a3e245d0a4bc default }" containerID=d2967661bce73c213ea6c7d7b61c193dfa55a724c42717ef1fef4aaf7aae9b40 datapathConfiguration="&{false false false false false }" interface=lxcf9861af4e121 k8sPodName=openstack/barbican-ks-service-95sdc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2967661bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-service-95sdc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2967661bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1c9f9094-ed90-4a2d-91f0-a6bc33a11ad7,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=1c9f9094-ed90-4a2d-91f0-a6bc33a11ad7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-service-95sdc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1c9f9094-ed90-4a2d-91f0-a6bc33a11ad7;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=1c9f9094-ed90-4a2d-91f0-a6bc33a11ad7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d2967661bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=24824 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1c9f9094-ed90-4a2d-91f0-a6bc33a11ad7,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=1c9f9094-ed90-4a2d-91f0-a6bc33a11ad7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-service-95sdc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2967661bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=24824 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-service-95sdc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2967661bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=563 identity=24824 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-service-95sdc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2967661bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=563 identity=24824 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-service-95sdc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d2967661bc endpointID=563 k8sNamespace=openstack k8sPodName=barbican-ks-service-95sdc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1c9f9094-ed90-4a2d-91f0-a6bc33a11ad7 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=1c9f9094-ed90-4a2d-91f0-a6bc33a11ad7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d2967661bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=563 identity=24824 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-service-95sdc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 1dfd923b-9186-49ad-b915-088640fb2103 default }" containerID=9afcf20e0b6d5f32a98a69b16eef546cf9b342e87516e7902785cf943772a170 datapathConfiguration="&{false false false false false }" interface=lxc5c674d888550 k8sPodName=openstack/barbican-ks-endpoints-l79ml labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9afcf20e0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2122 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l79ml subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9afcf20e0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2122 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c25ce65a-2ec4-4c6d-92bf-b33561cfe13c,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c25ce65a-2ec4-4c6d-92bf-b33561cfe13c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l79ml subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c25ce65a-2ec4-4c6d-92bf-b33561cfe13c;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c25ce65a-2ec4-4c6d-92bf-b33561cfe13c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9afcf20e0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2122 identity=14986 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c25ce65a-2ec4-4c6d-92bf-b33561cfe13c,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c25ce65a-2ec4-4c6d-92bf-b33561cfe13c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l79ml oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9afcf20e0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2122 identity=14986 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l79ml subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9afcf20e0b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2122 identity=14986 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l79ml subsys=endpoint level=info msg="Successful endpoint creation" containerID=9afcf20e0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2122 identity=14986 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l79ml subsys=daemon level=info msg="Delete endpoint request" containerID=9afcf20e0b endpointID=2122 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-l79ml subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c25ce65a-2ec4-4c6d-92bf-b33561cfe13c k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c25ce65a-2ec4-4c6d-92bf-b33561cfe13c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9afcf20e0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2122 identity=14986 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l79ml subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 8a68596c-8981-4162-9a74-f23da5f0546e default }" containerID=35b144b2ba7c6dbd30eff76ae46fccb3dfd49bdb30e837f2003a380466ccda04 datapathConfiguration="&{false false false false false }" interface=lxc2972c5711302 k8sPodName=openstack/barbican-ks-user-kr9bz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35b144b2ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-ks-user-kr9bz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35b144b2ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=49397708-fb8b-4e58-a679-0c32fd045db8,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=49397708-fb8b-4e58-a679-0c32fd045db8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-ks-user-kr9bz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=49397708-fb8b-4e58-a679-0c32fd045db8;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=49397708-fb8b-4e58-a679-0c32fd045db8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35b144b2ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identity=56806 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=49397708-fb8b-4e58-a679-0c32fd045db8,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=49397708-fb8b-4e58-a679-0c32fd045db8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-ks-user-kr9bz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=35b144b2ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identity=56806 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-ks-user-kr9bz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35b144b2ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=469 identity=56806 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-ks-user-kr9bz subsys=endpoint level=info msg="Successful endpoint creation" containerID=35b144b2ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=469 identity=56806 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-ks-user-kr9bz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=35b144b2ba endpointID=469 k8sNamespace=openstack k8sPodName=barbican-ks-user-kr9bz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=49397708-fb8b-4e58-a679-0c32fd045db8 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=49397708-fb8b-4e58-a679-0c32fd045db8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=35b144b2ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=469 identity=56806 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-ks-user-kr9bz subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.244 22b941ce-a2f8-4111-92fc-fc8e9870e497 default }" containerID=b719035623dc228c0fd1c7245094b86ff628d8670fd904cce228a309bf65a8c5 datapathConfiguration="&{false false false false false }" interface=lxca4d255582234 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-rcp5x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b719035623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-rcp5x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b719035623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-rcp5x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b719035623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 identity=35971 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-rcp5x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b719035623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 identity=35971 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-rcp5x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b719035623 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3636 identity=35971 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-rcp5x subsys=endpoint level=info msg="Successful endpoint creation" containerID=b719035623 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3636 identity=35971 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-rcp5x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.96 6bf40cb3-50bf-424c-9d83-ea52e420e1d7 default }" containerID=7abf7fe85d34ccb175c3fe009bfb9c8b1ef9711e464dad63f1a037c70466b847 datapathConfiguration="&{false false false false false }" interface=lxc4152271fc135 k8sPodName=openstack/rook-ceph-detect-version-4hxv4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7abf7fe85d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4hxv4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7abf7fe85d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=f9cb5b7b-27a3-45fc-9745-fd1693b41dd3,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=f9cb5b7b-27a3-45fc-9745-fd1693b41dd3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4hxv4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=f9cb5b7b-27a3-45fc-9745-fd1693b41dd3;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=f9cb5b7b-27a3-45fc-9745-fd1693b41dd3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7abf7fe85d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identity=3008 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=f9cb5b7b-27a3-45fc-9745-fd1693b41dd3,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=f9cb5b7b-27a3-45fc-9745-fd1693b41dd3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4hxv4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7abf7fe85d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identity=3008 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4hxv4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7abf7fe85d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2707 identity=3008 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4hxv4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7abf7fe85d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2707 identity=3008 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4hxv4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7abf7fe85d endpointID=2707 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-4hxv4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=f9cb5b7b-27a3-45fc-9745-fd1693b41dd3 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=f9cb5b7b-27a3-45fc-9745-fd1693b41dd3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=7abf7fe85d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2707 identity=3008 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4hxv4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 55f10c25-2f5b-4d0a-bd5d-7b40474fa596 default }" containerID=8a01ac1c34e7837d4c13fae7764d1574409a2494cc841cf24a49b7a6ea5711a0 datapathConfiguration="&{false false false false false }" interface=lxcae49458d6fb2 k8sPodName=openstack/ceph-object-controller-detect-version-rfkbp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a01ac1c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rfkbp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a01ac1c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=e7d9251f-728b-4a45-881f-65f35a1da356,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=e7d9251f-728b-4a45-881f-65f35a1da356,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rfkbp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8a01ac1c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.186 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rfkbp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=e7d9251f-728b-4a45-881f-65f35a1da356;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=e7d9251f-728b-4a45-881f-65f35a1da356;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a01ac1c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 identity=411 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=e7d9251f-728b-4a45-881f-65f35a1da356,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=e7d9251f-728b-4a45-881f-65f35a1da356,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rfkbp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a01ac1c34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 identity=411 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rfkbp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a01ac1c34 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2304 identity=411 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rfkbp subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a01ac1c34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2304 identity=411 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rfkbp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.169 0022a81d-e030-4af9-b7a8-57939cb5daec default }" containerID=94d0db5909ff0cbf724ddd6fd43d9c02252e8c23563d33bada39ee004c308f30 datapathConfiguration="&{false false false false false }" interface=lxcdfe46fa1a270 k8sPodName=local-path-storage/helper-pod-create-pvc-a7060570-b50e-409c-a20c-bccd1ba282f9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94d0db5909 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7060570-b50e-409c-a20c-bccd1ba282f9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94d0db5909 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7060570-b50e-409c-a20c-bccd1ba282f9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94d0db5909 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identity=3591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7060570-b50e-409c-a20c-bccd1ba282f9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94d0db5909 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identity=3591 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7060570-b50e-409c-a20c-bccd1ba282f9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94d0db5909 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1256 identity=3591 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7060570-b50e-409c-a20c-bccd1ba282f9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=94d0db5909 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1256 identity=3591 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7060570-b50e-409c-a20c-bccd1ba282f9 subsys=daemon level=info msg="Delete endpoint request" containerID=8a01ac1c34 endpointID=2304 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-rfkbp subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=e7d9251f-728b-4a45-881f-65f35a1da356 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=e7d9251f-728b-4a45-881f-65f35a1da356 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=8a01ac1c34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2304 identity=411 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rfkbp subsys=endpoint level=info msg="Delete endpoint request" containerID=94d0db5909 endpointID=1256 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a7060570-b50e-409c-a20c-bccd1ba282f9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=94d0db5909 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1256 identity=3591 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7060570-b50e-409c-a20c-bccd1ba282f9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 3f17c20b-5340-45d0-8f63-b97aed8c605a default }" containerID=07db2ff1b9380404e16a2a43be04be7dffd8330e5de8fae814b8d325f8c561a0 datapathConfiguration="&{false false false false false }" interface=lxc0f874402f55a k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07db2ff1b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07db2ff1b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=07db2ff1b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07db2ff1b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 identity=38400 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07db2ff1b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 identity=38400 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=07db2ff1b9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1615 identity=38400 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=07db2ff1b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1615 identity=38400 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.47 c109ba12-33c6-4180-a35f-381654e61e08 default }" containerID=197952c9d85f70628a91ddef931c19a2fb0e72948995cd36aedcc7faeb62fffd datapathConfiguration="&{false false false false false }" interface=lxcb0228f1c5d5a k8sPodName=openstack/glance-db-init-bbsk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=197952c9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-db-init-bbsk2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=197952c9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2791282d-bf52-40ed-bf57-e117ca851a84,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=2791282d-bf52-40ed-bf57-e117ca851a84,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-db-init-bbsk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2791282d-bf52-40ed-bf57-e117ca851a84;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=2791282d-bf52-40ed-bf57-e117ca851a84;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=197952c9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=9988 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2791282d-bf52-40ed-bf57-e117ca851a84,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=2791282d-bf52-40ed-bf57-e117ca851a84,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-db-init-bbsk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=197952c9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=9988 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-db-init-bbsk2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=197952c9d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=155 identity=9988 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-db-init-bbsk2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=197952c9d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=9988 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-db-init-bbsk2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=197952c9d8 endpointID=155 k8sNamespace=openstack k8sPodName=glance-db-init-bbsk2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2791282d-bf52-40ed-bf57-e117ca851a84 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=2791282d-bf52-40ed-bf57-e117ca851a84 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=197952c9d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=9988 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-db-init-bbsk2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 8d6bd907-60ae-46f3-812b-e6264efb6758 default }" containerID=9405c2ee4cfdf060f9831f7f1fdef2656ae2fcf1ea43c5695cd5c5284c6eabe9 datapathConfiguration="&{false false false false false }" interface=lxcc8ba17f2b29e k8sPodName=openstack/glance-db-sync-4wvtk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9405c2ee4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-db-sync-4wvtk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9405c2ee4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1f98190b-bfbc-4dce-ae13-83be0dca1b33,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=1f98190b-bfbc-4dce-ae13-83be0dca1b33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-db-sync-4wvtk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1f98190b-bfbc-4dce-ae13-83be0dca1b33;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=1f98190b-bfbc-4dce-ae13-83be0dca1b33;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9405c2ee4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 identity=21852 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1f98190b-bfbc-4dce-ae13-83be0dca1b33,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=1f98190b-bfbc-4dce-ae13-83be0dca1b33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-db-sync-4wvtk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9405c2ee4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 identity=21852 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-db-sync-4wvtk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9405c2ee4c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2318 identity=21852 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-db-sync-4wvtk subsys=endpoint level=info msg="Successful endpoint creation" containerID=9405c2ee4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2318 identity=21852 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-db-sync-4wvtk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.179 e24c0fd9-9910-4461-8623-0d335ae9043d default }" containerID=73b9af8af2a61860cb18d8134c44018b1d1b0777967d469584cb5e58ca647314 datapathConfiguration="&{false false false false false }" interface=lxcf49e04672b7f k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6d7nz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73b9af8af2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6d7nz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73b9af8af2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6d7nz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=73b9af8af2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identity=10257 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6d7nz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73b9af8af2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identity=10257 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6d7nz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 59f0cb3f-6946-428e-b6c4-0915ad810622 default }" containerID=c4a469ff11b4b25158296e00832473338806c09fa47c1a4d8c9befd8e337b937 datapathConfiguration="&{false false false false false }" interface=lxcb1c0ef29a1b4 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jghkx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4a469ff11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jghkx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4a469ff11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jghkx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4a469ff11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 identity=3938 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jghkx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4a469ff11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=493 identity=3938 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jghkx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73b9af8af2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=902 identity=10257 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6d7nz subsys=endpoint level=info msg="Successful endpoint creation" containerID=73b9af8af2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=902 identity=10257 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6d7nz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c4a469ff11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=493 identity=3938 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jghkx subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4a469ff11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=493 identity=3938 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jghkx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9405c2ee4c endpointID=2318 k8sNamespace=openstack k8sPodName=glance-db-sync-4wvtk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1f98190b-bfbc-4dce-ae13-83be0dca1b33 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=1f98190b-bfbc-4dce-ae13-83be0dca1b33 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9405c2ee4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2318 identity=21852 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-db-sync-4wvtk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 c558768d-3cf2-40ac-a072-acbd96d3644c default }" containerID=6c415aaaf4ff0d45cdcccaad3c5a2bb87f5bbea49f43a1e6b71aed34d8daec6a datapathConfiguration="&{false false false false false }" interface=lxcbf7d5ec66dfc k8sPodName=openstack/glance-rabbit-init-pjpk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c415aaaf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-rabbit-init-pjpk2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c415aaaf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=75eb291e-e3ca-4b88-a01f-e7717e45951e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=75eb291e-e3ca-4b88-a01f-e7717e45951e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-rabbit-init-pjpk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6c415aaaf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-rabbit-init-pjpk2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=75eb291e-e3ca-4b88-a01f-e7717e45951e;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=75eb291e-e3ca-4b88-a01f-e7717e45951e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c415aaaf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identity=9768 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=75eb291e-e3ca-4b88-a01f-e7717e45951e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=75eb291e-e3ca-4b88-a01f-e7717e45951e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-rabbit-init-pjpk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c415aaaf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identity=9768 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-rabbit-init-pjpk2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c415aaaf4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=298 identity=9768 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-rabbit-init-pjpk2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c415aaaf4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=298 identity=9768 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-rabbit-init-pjpk2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6c415aaaf4 endpointID=298 k8sNamespace=openstack k8sPodName=glance-rabbit-init-pjpk2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=75eb291e-e3ca-4b88-a01f-e7717e45951e k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=75eb291e-e3ca-4b88-a01f-e7717e45951e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6c415aaaf4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=298 identity=9768 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-rabbit-init-pjpk2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 8c9b74bc-279c-4bd7-a8ae-4e1503d2c5d9 default }" containerID=53fd9b00cbf0ea7a8aec3d685d14f9993b6a13e6afe245e33fd30e1c321c08b2 datapathConfiguration="&{false false false false false }" interface=lxc92a165c5dabd k8sPodName=openstack/glance-ks-service-wftzk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53fd9b00cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-service-wftzk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53fd9b00cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8119eb0e-3e54-4609-8ecd-df4ddc67d162,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=8119eb0e-3e54-4609-8ecd-df4ddc67d162,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-service-wftzk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8119eb0e-3e54-4609-8ecd-df4ddc67d162;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=8119eb0e-3e54-4609-8ecd-df4ddc67d162;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53fd9b00cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identity=18644 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8119eb0e-3e54-4609-8ecd-df4ddc67d162,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=8119eb0e-3e54-4609-8ecd-df4ddc67d162,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-service-wftzk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53fd9b00cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identity=18644 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-service-wftzk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=53fd9b00cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=382 identity=18644 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-service-wftzk subsys=endpoint level=info msg="Successful endpoint creation" containerID=53fd9b00cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=382 identity=18644 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-service-wftzk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=53fd9b00cb endpointID=382 k8sNamespace=openstack k8sPodName=glance-ks-service-wftzk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8119eb0e-3e54-4609-8ecd-df4ddc67d162 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=8119eb0e-3e54-4609-8ecd-df4ddc67d162 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=53fd9b00cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=382 identity=18644 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-service-wftzk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 5a0b7feb-dc7f-4460-9c4c-6ffc1ed27faf default }" containerID=57cdfb6016c9bc148864e4bc51313c46ada6daa6bc8c96cc34cef65eaa008587 datapathConfiguration="&{false false false false false }" interface=lxceec308b98ebb k8sPodName=openstack/glance-ks-endpoints-2mzj6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57cdfb6016 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-ks-endpoints-2mzj6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57cdfb6016 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6525412a-52a4-41d5-afaa-ce58b7a64fca,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6525412a-52a4-41d5-afaa-ce58b7a64fca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-ks-endpoints-2mzj6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=57cdfb6016 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-ks-endpoints-2mzj6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6525412a-52a4-41d5-afaa-ce58b7a64fca;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=6525412a-52a4-41d5-afaa-ce58b7a64fca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57cdfb6016 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identity=9068 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6525412a-52a4-41d5-afaa-ce58b7a64fca,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6525412a-52a4-41d5-afaa-ce58b7a64fca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-ks-endpoints-2mzj6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57cdfb6016 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identity=9068 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-ks-endpoints-2mzj6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57cdfb6016 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=141 identity=9068 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-ks-endpoints-2mzj6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=57cdfb6016 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=141 identity=9068 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-ks-endpoints-2mzj6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57cdfb6016 endpointID=141 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-2mzj6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6525412a-52a4-41d5-afaa-ce58b7a64fca k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=6525412a-52a4-41d5-afaa-ce58b7a64fca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=57cdfb6016 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=141 identity=9068 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-ks-endpoints-2mzj6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 0ccaf142-d4ac-4f48-b046-98573ecdb69c default }" containerID=1b7b862e0d4681954cbeba65c3b71f9252a16e0d99ab8a389ed91410837d0bdf datapathConfiguration="&{false false false false false }" interface=lxc15437c97c6f4 k8sPodName=openstack/glance-ks-user-f28pw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b7b862e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-user-f28pw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b7b862e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f09b972e-f7b1-4d14-ae59-1d7b1a276f56,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f09b972e-f7b1-4d14-ae59-1d7b1a276f56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-user-f28pw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f09b972e-f7b1-4d14-ae59-1d7b1a276f56;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=f09b972e-f7b1-4d14-ae59-1d7b1a276f56;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b7b862e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identity=27816 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f09b972e-f7b1-4d14-ae59-1d7b1a276f56,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f09b972e-f7b1-4d14-ae59-1d7b1a276f56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-user-f28pw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b7b862e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identity=27816 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-user-f28pw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1b7b862e0d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=357 identity=27816 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-user-f28pw subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b7b862e0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=357 identity=27816 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-user-f28pw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1b7b862e0d endpointID=357 k8sNamespace=openstack k8sPodName=glance-ks-user-f28pw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f09b972e-f7b1-4d14-ae59-1d7b1a276f56 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=f09b972e-f7b1-4d14-ae59-1d7b1a276f56 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1b7b862e0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=357 identity=27816 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-user-f28pw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 2eaa3aaf-5153-4f13-b6b3-79a73d1ebf2e default }" containerID=7cb9074210af5566c9cb6c426a4befa762557085cf3f562218ae85a76526af7b datapathConfiguration="&{false false false false false }" interface=lxc4efabb2b5175 k8sPodName=openstack/glance-metadefs-load-m6nft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7cb9074210 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-metadefs-load-m6nft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7cb9074210 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c77b80d0-6ca1-451d-a4ac-916704fa8bd2,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=c77b80d0-6ca1-451d-a4ac-916704fa8bd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-metadefs-load-m6nft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c77b80d0-6ca1-451d-a4ac-916704fa8bd2;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=c77b80d0-6ca1-451d-a4ac-916704fa8bd2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7cb9074210 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-metadefs-load-m6nft line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7cb9074210 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identity=57980 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c77b80d0-6ca1-451d-a4ac-916704fa8bd2,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=c77b80d0-6ca1-451d-a4ac-916704fa8bd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-metadefs-load-m6nft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7cb9074210 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identity=57980 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-metadefs-load-m6nft subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7cb9074210 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=163 identity=57980 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-metadefs-load-m6nft subsys=endpoint level=info msg="Successful endpoint creation" containerID=7cb9074210 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=163 identity=57980 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-metadefs-load-m6nft subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7cb9074210 endpointID=163 k8sNamespace=openstack k8sPodName=glance-metadefs-load-m6nft subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c77b80d0-6ca1-451d-a4ac-916704fa8bd2 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=c77b80d0-6ca1-451d-a4ac-916704fa8bd2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7cb9074210 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=163 identity=57980 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-metadefs-load-m6nft subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 9280995a-5a25-4230-b958-c8bb49a69aa9 default }" containerID=d60d5091d080c976cc242974482f2bc57bce256f65d753310aed20ae67fc4fcd datapathConfiguration="&{false false false false false }" interface=lxc0b6f3e60fda5 k8sPodName=openstack/glance-storage-init-rlx55 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d60d5091d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-rlx55 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d60d5091d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c4a20ff5-b486-44ad-909f-04cd64d53232,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=c4a20ff5-b486-44ad-909f-04cd64d53232,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-rlx55 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c4a20ff5-b486-44ad-909f-04cd64d53232;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=c4a20ff5-b486-44ad-909f-04cd64d53232;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d60d5091d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=13764 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c4a20ff5-b486-44ad-909f-04cd64d53232,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=c4a20ff5-b486-44ad-909f-04cd64d53232,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-rlx55 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d60d5091d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=13764 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-rlx55 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d60d5091d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1818 identity=13764 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-rlx55 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d60d5091d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1818 identity=13764 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-rlx55 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d60d5091d0 endpointID=1818 k8sNamespace=openstack k8sPodName=glance-storage-init-rlx55 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c4a20ff5-b486-44ad-909f-04cd64d53232 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=c4a20ff5-b486-44ad-909f-04cd64d53232 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d60d5091d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1818 identity=13764 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-rlx55 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 afcd3585-7e07-4181-ab83-92f985ef5909 default }" containerID=bd370c5032cb8c4b40fd04c80515b5b3d4b5727a211c3b5ce680e763d009f689 datapathConfiguration="&{false false false false false }" interface=lxc133eca014bfb k8sPodName=openstack/glance-api-9cbf9c9d9-9pwkf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd370c5032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1093 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-9cbf9c9d9-9pwkf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd370c5032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1093 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-9cbf9c9d9-9pwkf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd370c5032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1093 identity=11155 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-9cbf9c9d9-9pwkf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd370c5032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1093 identity=11155 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-9cbf9c9d9-9pwkf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bd370c5032 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1093 identity=11155 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-9cbf9c9d9-9pwkf subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd370c5032 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1093 identity=11155 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-9cbf9c9d9-9pwkf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.49 7eb5cf2c-ea57-498f-92b7-ed9cbcc650e8 default }" containerID=e178fd1f9aac740f3443af3eaddd0119e07815c832145b61b7690cc094867008 datapathConfiguration="&{false false false false false }" interface=lxc5f396dbf4c9b k8sPodName=openstack/staffeln-api-89cf9f546-llwz5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e178fd1f9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-api-89cf9f546-llwz5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e178fd1f9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-api-89cf9f546-llwz5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e178fd1f9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identity=8742 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-api-89cf9f546-llwz5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e178fd1f9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identity=8742 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-api-89cf9f546-llwz5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 91a0f3c0-0f9c-4e82-b7cd-1078a45c2903 default }" containerID=673a15d9ed57ad142c86bfceb1da1669c4d45432c754907fffa95c2602042d4b datapathConfiguration="&{false false false false false }" interface=lxc895a26172080 k8sPodName=openstack/staffeln-conductor-5cd875dd49-6sv5n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=673a15d9ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-conductor-5cd875dd49-6sv5n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=673a15d9ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-conductor-5cd875dd49-6sv5n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=673a15d9ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identity=51125 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-conductor-5cd875dd49-6sv5n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=673a15d9ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identity=51125 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-conductor-5cd875dd49-6sv5n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e178fd1f9a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=170 identity=8742 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-api-89cf9f546-llwz5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e178fd1f9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=170 identity=8742 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-api-89cf9f546-llwz5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.96 8b582160-9343-4577-b56c-86f671fef05c default }" containerID=2435aba5db13254d7c6d4c326377b52daa5154de60d735ecbf2713c2e94ccdbc datapathConfiguration="&{false false false false false }" interface=lxc00d43db54063 k8sPodName=openstack/staffeln-db-init-pqmkq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2435aba5db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-db-init-pqmkq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2435aba5db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c8aa50f6-3c43-4ba4-b310-1ba98e089525,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=c8aa50f6-3c43-4ba4-b310-1ba98e089525,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-db-init-pqmkq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=c8aa50f6-3c43-4ba4-b310-1ba98e089525;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=c8aa50f6-3c43-4ba4-b310-1ba98e089525;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2435aba5db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=10862 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c8aa50f6-3c43-4ba4-b310-1ba98e089525,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=c8aa50f6-3c43-4ba4-b310-1ba98e089525,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-db-init-pqmkq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2435aba5db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=10862 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-db-init-pqmkq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=673a15d9ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1281 identity=51125 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-conductor-5cd875dd49-6sv5n subsys=endpoint level=info msg="Successful endpoint creation" containerID=673a15d9ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1281 identity=51125 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-conductor-5cd875dd49-6sv5n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2435aba5db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=958 identity=10862 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-db-init-pqmkq subsys=endpoint level=info msg="Successful endpoint creation" containerID=2435aba5db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=958 identity=10862 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-db-init-pqmkq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2435aba5db endpointID=958 k8sNamespace=openstack k8sPodName=staffeln-db-init-pqmkq subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=c8aa50f6-3c43-4ba4-b310-1ba98e089525 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=c8aa50f6-3c43-4ba4-b310-1ba98e089525 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=2435aba5db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=958 identity=10862 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-db-init-pqmkq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 6f98e36d-b246-4403-838b-be7fe9497d0b default }" containerID=b09b4eeb6e934913aa79e13ecc9dc412380c8162608f63d6d70cd7dea6e6fc46 datapathConfiguration="&{false false false false false }" interface=lxc637e8a1c024e k8sPodName=openstack/staffeln-db-sync-4nn6x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b09b4eeb6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-sync-4nn6x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b09b4eeb6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f6b3f4db-5dc1-42ce-9bf2-7516d61bc65c,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f6b3f4db-5dc1-42ce-9bf2-7516d61bc65c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-sync-4nn6x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b09b4eeb6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-sync-4nn6x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=f6b3f4db-5dc1-42ce-9bf2-7516d61bc65c;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=f6b3f4db-5dc1-42ce-9bf2-7516d61bc65c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b09b4eeb6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identity=16805 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f6b3f4db-5dc1-42ce-9bf2-7516d61bc65c,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f6b3f4db-5dc1-42ce-9bf2-7516d61bc65c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-sync-4nn6x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b09b4eeb6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identity=16805 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-sync-4nn6x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b09b4eeb6e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2250 identity=16805 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-sync-4nn6x subsys=endpoint level=info msg="Successful endpoint creation" containerID=b09b4eeb6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2250 identity=16805 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-sync-4nn6x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager