level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.000493ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="85.593µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.040975ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="8.2µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=92.337401ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="10.001µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="12.74µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="45.342µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="47.611µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="54.052µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="344.948µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.55µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.726237ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.533504ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="23.63µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="24.79µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="150.623µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="60.141µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="50.772µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=47.216381ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="123.763µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.17µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.44.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.312217ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="12.531µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.112338ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.7µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.556998ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.57µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.45µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="22.601µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="14.46µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="56.531µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="322.848µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.86µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="34.421µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="244.957µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="851.88µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.181408ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.45µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="20.421µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.44 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.44 ipAddr.ipv6="" k8sNodeIP=199.204.45.44 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.44" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.32" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.44" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.44} {CiliumInternalIP 10.0.0.32}] 10.0.0.0/24 [] [] 10.0.0.126 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:33123" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.646183678s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="18.94µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="97.212µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="142.474µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="15.93µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1739 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1739 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1739 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.581719832s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=302.844143ms file-path=/var/run/cilium/state/templates/fd3788e842064ec1f29dcf1ea18b128d8174dbf4e541bffca9e3c2ce3553aa07/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1739 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 f0c8f020-2671-495d-8a66-5932a1838e07 default }" containerID=f01434cf0d4ca36d17a45da1d8fa6720670559f89903a934f86a934241fcddcb datapathConfiguration="&{false false false false false }" interface=lxcb5155d035df9 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wvdbx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f01434cf0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wvdbx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f01434cf0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=84286ca1-ed09-411c-87e5-91a2309c60e5,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=84286ca1-ed09-411c-87e5-91a2309c60e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wvdbx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 11e30158-f56d-44c1-8943-05e43ec5e888 default }" containerID=59f33e755e7afe19e52759b396ef0b630f5a42f5c5b0eaadd8746625cc28dc53 datapathConfiguration="&{false false false false false }" interface=lxc5fbbc5d2c1eb k8sPodName=kube-system/coredns-7c96b6546b-m5j5h labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="New endpoint" containerID=59f33e755e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 ipv4=10.0.0.42 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m5j5h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59f33e755e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.42 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m5j5h subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=84286ca1-ed09-411c-87e5-91a2309c60e5;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=84286ca1-ed09-411c-87e5-91a2309c60e5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f01434cf0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identity=54089 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=84286ca1-ed09-411c-87e5-91a2309c60e5,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=84286ca1-ed09-411c-87e5-91a2309c60e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wvdbx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f01434cf0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identity=54089 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wvdbx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=59f33e755e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m5j5h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59f33e755e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 identity=14587 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.42 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m5j5h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59f33e755e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 identity=14587 ipv4=10.0.0.42 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m5j5h subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 ipv4=10.0.0.126 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 identityLabels="reserved:health" ipv4=10.0.0.126 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 identity=4 identityLabels="reserved:health" ipv4=10.0.0.126 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.087900343s file-path=/var/run/cilium/state/templates/4343454fb5f4510da4332a5621bc554e0d55a1c7ad14185c413f4d9ccbcad5ed/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=787 identity=4 ipv4=10.0.0.126 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59f33e755e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2753 identity=14587 ipv4=10.0.0.42 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m5j5h subsys=endpoint level=info msg="Successful endpoint creation" containerID=59f33e755e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2753 identity=14587 ipv4=10.0.0.42 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m5j5h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f01434cf0d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2297 identity=54089 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wvdbx subsys=endpoint level=info msg="Successful endpoint creation" containerID=f01434cf0d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2297 identity=54089 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wvdbx subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f01434cf0d endpointID=2297 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-wvdbx subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=84286ca1-ed09-411c-87e5-91a2309c60e5 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=84286ca1-ed09-411c-87e5-91a2309c60e5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=f01434cf0d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2297 identity=54089 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wvdbx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 90581cb4-d3c2-4b16-9746-40f3123b5876 default }" containerID=98463a81989064f12f9ea7bf2974a8ddf5fde6446334baf7603d735a19091305 datapathConfiguration="&{false false false false false }" interface=lxc9afe80ab0c60 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-djs9q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98463a8198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 ipv4=10.0.0.118 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-djs9q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98463a8198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.118 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-djs9q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=98463a8198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-djs9q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98463a8198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identity=13891 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.118 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-djs9q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98463a8198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identity=13891 ipv4=10.0.0.118 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-djs9q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98463a8198 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=574 identity=13891 ipv4=10.0.0.118 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-djs9q subsys=endpoint level=info msg="Successful endpoint creation" containerID=98463a8198 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=574 identity=13891 ipv4=10.0.0.118 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-djs9q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1739 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01739 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01739 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01739 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01739:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1739 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 2995d4fd-7827-4687-8603-3b73a3047e5a default }" containerID=be66862ae425c4c75478f91dca6204b3d9ae8707d1cd007b2bb42e7615daf846 datapathConfiguration="&{false false false false false }" interface=lxce041b060c6a4 k8sPodName=kube-system/coredns-67659f764b-mnfzw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be66862ae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-67659f764b-mnfzw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be66862ae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-67659f764b-mnfzw subsys=endpoint level=info msg="Identity of endpoint changed" containerID=be66862ae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=14587 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-67659f764b-mnfzw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be66862ae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=14587 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-67659f764b-mnfzw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be66862ae4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=31 identity=14587 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-67659f764b-mnfzw subsys=endpoint level=info msg="Successful endpoint creation" containerID=be66862ae4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=31 identity=14587 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-67659f764b-mnfzw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.137 4e46d829-bb3f-49ec-9cbf-3c97173852fd default }" containerID=664f0895098687a7165da114c3af0361043f08aaf1fd690be47788519e11de11 datapathConfiguration="&{false false false false false }" interface=lxc8e1361679794 k8sPodName=kube-system/coredns-67659f764b-zzblw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=664f089509 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 ipv4=10.0.0.137 ipv6= k8sPodName=kube-system/coredns-67659f764b-zzblw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=664f089509 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.137 ipv6= k8sPodName=kube-system/coredns-67659f764b-zzblw subsys=endpoint level=info msg="Identity of endpoint changed" containerID=664f089509 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 identity=14587 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.137 ipv6= k8sPodName=kube-system/coredns-67659f764b-zzblw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=664f089509 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 identity=14587 ipv4=10.0.0.137 ipv6= k8sPodName=kube-system/coredns-67659f764b-zzblw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=664f089509 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=884 identity=14587 ipv4=10.0.0.137 ipv6= k8sPodName=kube-system/coredns-67659f764b-zzblw subsys=endpoint level=info msg="Successful endpoint creation" containerID=664f089509 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=884 identity=14587 ipv4=10.0.0.137 ipv6= k8sPodName=kube-system/coredns-67659f764b-zzblw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.23 240ae263-4c9c-437f-9b3f-df56049b2706 default }" containerID=208e2716f4673f4d8d7436c932b32d1dcf78531c4bbbedbf30ced714dc6f0bac datapathConfiguration="&{false false false false false }" interface=lxca68937482e03 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hsrkj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=208e2716f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3329 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hsrkj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=208e2716f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3329 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hsrkj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=208e2716f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3329 identity=11377 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hsrkj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=208e2716f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3329 identity=11377 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hsrkj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=208e2716f4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3329 identity=11377 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hsrkj subsys=endpoint level=info msg="Successful endpoint creation" containerID=208e2716f4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3329 identity=11377 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hsrkj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=59f33e755e endpointID=2753 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-m5j5h subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=59f33e755e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2753 identity=14587 ipv4=10.0.0.42 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m5j5h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 d18f1cd5-6501-4c90-8aef-4ab3b85a8cb3 default }" containerID=bc2c3ee004e8ac9d816efaa4b3e26dea3374f69084c71b5e3f22ab9d1360a580 datapathConfiguration="&{false false false false false }" interface=lxcf8c7abfffae8 k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-x59g8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc2c3ee004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-x59g8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc2c3ee004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-x59g8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc2c3ee004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identity=1928 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-x59g8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bc2c3ee004 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identity=1928 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-x59g8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 436d3983-024d-48b7-b420-7cde2c897f77 default }" containerID=4dc321912df398bdd4e7c3eda5f871a53be667c8a0da9c529876e0f2caf7fcc3 datapathConfiguration="&{false false false false false }" interface=lxc31f11a13bb62 k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-ftwc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dc321912d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-ftwc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dc321912d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-ftwc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4dc321912d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 identity=21068 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-ftwc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4dc321912d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 identity=21068 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-ftwc2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc2c3ee004 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=759 identity=1928 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-x59g8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc2c3ee004 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=759 identity=1928 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-x59g8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.189 477f2885-d496-402f-9741-a72c59fe5bfe default }" containerID=200ece1df68cccba6e33898ee7d797f376704a65193c64c45f6733050b2bc2b8 datapathConfiguration="&{false false false false false }" interface=lxc9e704da73b22 k8sPodName=cert-manager/cert-manager-75969b45cf-ztkkc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=200ece1df6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ztkkc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=200ece1df6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ztkkc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=200ece1df6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 identity=60702 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ztkkc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=200ece1df6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 identity=60702 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ztkkc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4dc321912d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2220 identity=21068 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-ftwc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dc321912d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2220 identity=21068 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-ftwc2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=200ece1df6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3934 identity=60702 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ztkkc subsys=endpoint level=info msg="Successful endpoint creation" containerID=200ece1df6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3934 identity=60702 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ztkkc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.65 c18ff57f-bb24-43a9-b832-45b7de105475 default }" containerID=7f4000099d6bc360e42c6b6e918589e5a4034699ccfe7153d5362d85ae9dc60e datapathConfiguration="&{false false false false false }" interface=lxce3b5422149a9 k8sPodName=cert-manager/cert-manager-startupapicheck-dwk6f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f4000099d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2447 ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dwk6f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f4000099d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2447 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=0d0ec316-f19f-4a52-b117-f681009d087c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=0d0ec316-f19f-4a52-b117-f681009d087c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dwk6f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=0d0ec316-f19f-4a52-b117-f681009d087c;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=0d0ec316-f19f-4a52-b117-f681009d087c;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f4000099d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2447 identity=2374 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=0d0ec316-f19f-4a52-b117-f681009d087c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=0d0ec316-f19f-4a52-b117-f681009d087c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dwk6f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f4000099d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2447 identity=2374 ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dwk6f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f4000099d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2447 identity=2374 ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dwk6f subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f4000099d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2447 identity=2374 ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dwk6f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7f4000099d endpointID=2447 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-dwk6f subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=0d0ec316-f19f-4a52-b117-f681009d087c k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=0d0ec316-f19f-4a52-b117-f681009d087c k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=7f4000099d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2447 identity=2374 ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-dwk6f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 5c60efa8-4e17-471d-abe7-20d4636699a2 default }" containerID=a7d8386fe07c2cdab1992e054bf6d435802ae983ebbdb259f70f3d9e91f043c7 datapathConfiguration="&{false false false false false }" interface=lxc3fb6a7ba71b4 k8sPodName=ingress-nginx/ingress-nginx-admission-create-dtsjv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7d8386fe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 ipv4=10.0.0.119 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dtsjv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7d8386fe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6f75799c-9db9-4f09-93ce-75b866377d30,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=6f75799c-9db9-4f09-93ce-75b866377d30,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.119 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dtsjv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=6f75799c-9db9-4f09-93ce-75b866377d30;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=6f75799c-9db9-4f09-93ce-75b866377d30;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7d8386fe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 identity=463 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6f75799c-9db9-4f09-93ce-75b866377d30,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=6f75799c-9db9-4f09-93ce-75b866377d30,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.119 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dtsjv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7d8386fe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 identity=463 ipv4=10.0.0.119 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dtsjv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a7d8386fe0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2810 identity=463 ipv4=10.0.0.119 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dtsjv subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7d8386fe0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2810 identity=463 ipv4=10.0.0.119 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dtsjv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a7d8386fe0 endpointID=2810 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-dtsjv subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=6f75799c-9db9-4f09-93ce-75b866377d30 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=6f75799c-9db9-4f09-93ce-75b866377d30 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=a7d8386fe0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2810 identity=463 ipv4=10.0.0.119 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dtsjv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 821df016-470b-4642-94e9-341ec3873d93 default }" containerID=64bc1603048f476f8579ed8df92e7870fb477db98fea88a95e6a13c145721536 datapathConfiguration="&{false false false false false }" interface=lxc815625fa028c k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bctw2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64bc160304 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 ipv4=10.0.0.223 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bctw2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64bc160304 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.223 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bctw2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=64bc160304 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.223 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bctw2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64bc160304 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identity=39012 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.223 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bctw2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64bc160304 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identity=39012 ipv4=10.0.0.223 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bctw2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64bc160304 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2186 identity=39012 ipv4=10.0.0.223 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bctw2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=64bc160304 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2186 identity=39012 ipv4=10.0.0.223 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bctw2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.224 e93087e5-2181-4472-8001-b7a3a0872fab default }" containerID=e1c253bc10f95c93ba24ba1960ecb0fa6ef43777aa1291ddf87cef0ccecfc276 datapathConfiguration="&{false false false false false }" interface=lxc597bd4006c59 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-v7qfk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1c253bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-v7qfk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1c253bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f18047ed-77f7-4e8a-83cc-5ff849bc7d96,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=f18047ed-77f7-4e8a-83cc-5ff849bc7d96,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-v7qfk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=f18047ed-77f7-4e8a-83cc-5ff849bc7d96;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=f18047ed-77f7-4e8a-83cc-5ff849bc7d96;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1c253bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identity=4953 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f18047ed-77f7-4e8a-83cc-5ff849bc7d96,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=f18047ed-77f7-4e8a-83cc-5ff849bc7d96,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-v7qfk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1c253bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identity=4953 ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-v7qfk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e1c253bc10 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=807 identity=4953 ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-v7qfk subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1c253bc10 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=807 identity=4953 ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-v7qfk subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e1c253bc10 endpointID=807 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-v7qfk subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=f18047ed-77f7-4e8a-83cc-5ff849bc7d96 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=f18047ed-77f7-4e8a-83cc-5ff849bc7d96 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=e1c253bc10 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=807 identity=4953 ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-v7qfk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 87aaaac2-6de7-49f9-a960-8ab8638b06c8 default }" containerID=c423f68901ec476ad6100cc181f07bbd9fc8f49162cb0ef6307f5ad4b4d200ce datapathConfiguration="&{false false false false false }" interface=lxcedfae19a0daa k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-q9vmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c423f68901 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-q9vmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c423f68901 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-q9vmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c423f68901 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-q9vmx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c423f68901 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 identity=11242 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-q9vmx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c423f68901 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 identity=11242 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-q9vmx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c423f68901 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=652 identity=11242 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-q9vmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=c423f68901 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=652 identity=11242 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-q9vmx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.152 62381410-c8a9-452b-a5fc-c676e3d31ced default }" containerID=67150e346097354f7a2603894d46640f514c7056c6dceac1a371d47291c83a78 datapathConfiguration="&{false false false false false }" interface=lxc8a8b13bbe3cf k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-qkd6p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67150e3460 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3400 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-qkd6p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67150e3460 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3400 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-qkd6p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67150e3460 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3400 identity=1808 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-qkd6p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67150e3460 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3400 identity=1808 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-qkd6p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67150e3460 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3400 identity=1808 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-qkd6p subsys=endpoint level=info msg="Successful endpoint creation" containerID=67150e3460 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3400 identity=1808 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-qkd6p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 056cca13-fc5a-4c78-a11f-34c29b62ea71 default }" containerID=4eae8acc3d279e113495d9c5ba280d7d599ad5211eb6cd3b8a77abaedd0f7c67 datapathConfiguration="&{false false false false false }" interface=lxc31a9fd4ac5f0 k8sPodName=openstack/pxc-operator-59d66cbc78-5cfdm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4eae8acc3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-5cfdm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4eae8acc3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-5cfdm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4eae8acc3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-5cfdm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4eae8acc3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identity=12879 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-5cfdm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4eae8acc3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identity=12879 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-5cfdm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4eae8acc3d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2152 identity=12879 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-5cfdm subsys=endpoint level=info msg="Successful endpoint creation" containerID=4eae8acc3d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2152 identity=12879 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-5cfdm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.121 b909f6b0-6b5e-498f-9088-e0b07c6019d7 default }" containerID=0116cf22e8ebbeaef08143fe50cd9e9d8f70a22813084e74497f566fae598962 datapathConfiguration="&{false false false false false }" interface=lxc5495d6639bd3 k8sPodName=local-path-storage/helper-pod-create-pvc-cc84f323-6647-49de-93f1-3b2b694a39e8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0116cf22e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc84f323-6647-49de-93f1-3b2b694a39e8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0116cf22e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc84f323-6647-49de-93f1-3b2b694a39e8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0116cf22e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 identity=6843 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc84f323-6647-49de-93f1-3b2b694a39e8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0116cf22e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 identity=6843 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc84f323-6647-49de-93f1-3b2b694a39e8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 4b4f84bd-4601-43bc-98a3-0548ee05f9ec default }" containerID=76c04c45054bc7fe9365858493bbf1510991899037e8ec8c2d0862f7210ccec6 datapathConfiguration="&{false false false false false }" interface=lxc26172a1881c5 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76c04c4505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76c04c4505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76c04c4505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=37825 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76c04c4505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=37825 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0116cf22e8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1848 identity=6843 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc84f323-6647-49de-93f1-3b2b694a39e8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0116cf22e8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1848 identity=6843 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc84f323-6647-49de-93f1-3b2b694a39e8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=76c04c4505 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=537 identity=37825 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=76c04c4505 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=537 identity=37825 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0116cf22e8 endpointID=1848 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cc84f323-6647-49de-93f1-3b2b694a39e8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0116cf22e8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1848 identity=6843 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc84f323-6647-49de-93f1-3b2b694a39e8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 ecd36de8-a0bf-4a22-8170-ec14d3eb74f2 default }" containerID=838f002222481561807a76117b237c8a4f2db4a8e4e100248a7eba672b2e3854 datapathConfiguration="&{false false false false false }" interface=lxc2a4a4e3fc42d k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=838f002222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=838f002222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=838f002222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.148 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=838f002222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 identity=23366 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=838f002222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 identity=23366 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=838f002222 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1683 identity=23366 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=838f002222 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1683 identity=23366 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.35 d1486cf7-801c-41e9-952f-2ff97ae63ba4 default }" containerID=d13ac21caa69bc78343f5f084c12ded4bb098f6df7c33ab103a3bfd5c429d7a4 datapathConfiguration="&{false false false false false }" interface=lxc7574920f4fd9 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d13ac21caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d13ac21caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d13ac21caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identity=54933 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d13ac21caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identity=54933 ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d13ac21caa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=256 identity=54933 ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d13ac21caa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=256 identity=54933 ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 06ae32be-2473-495f-9d56-32fb685003e8 default }" containerID=dbf85e88aa231257f5fa45bb059b32888aa92fd935f84bc197e1fb372c4e60eb datapathConfiguration="&{false false false false false }" interface=lxc9af906ccacb9 k8sPodName=monitoring/node-feature-discovery-worker-bwjj8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbf85e88aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bwjj8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbf85e88aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bwjj8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.101 5715abe9-fb93-4354-89e5-526d06ccd9e3 default }" containerID=6e2bf08db6d42c4667e0713f955601d328e21db915b38694ff06f09d7a15bf7e datapathConfiguration="&{false false false false false }" interface=lxcd250fd49cf83 k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-pk5ld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e2bf08db6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-pk5ld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e2bf08db6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-pk5ld subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbf85e88aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 identity=32417 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bwjj8 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=dbf85e88aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 identity=32417 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bwjj8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6e2bf08db6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-pk5ld line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e2bf08db6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identity=36675 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-pk5ld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e2bf08db6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identity=36675 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-pk5ld subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dbf85e88aa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3469 identity=32417 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bwjj8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbf85e88aa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3469 identity=32417 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bwjj8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6e2bf08db6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2825 identity=36675 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-pk5ld subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e2bf08db6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2825 identity=36675 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-pk5ld subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.116 36140f21-939c-4de8-8c0a-a8c55074575e default }" containerID=5e9c7d5feaa37d369590e3b1c6ac69e337f3c1510a8212b378ca7d9fef722c43 datapathConfiguration="&{false false false false false }" interface=lxc4f0930a2ce9a k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ls6zq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e9c7d5fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ls6zq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e9c7d5fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ls6zq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e9c7d5fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identity=34675 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ls6zq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e9c7d5fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identity=34675 ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ls6zq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e9c7d5fea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1453 identity=34675 ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ls6zq subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e9c7d5fea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1453 identity=34675 ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ls6zq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1739 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SCE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01739 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01739 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01739 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01739:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1739 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.011193474643905474 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.190 fbb7a41b-79e2-44bc-aef5-f4be4810f639 default }" containerID=f9663d676f8e8a02a8da524da2a372f00dd250941c013ca87cfa957fd0db2268 datapathConfiguration="&{false false false false false }" interface=lxc6f8ea18339fa k8sPodName=monitoring/kube-prometheus-stack-admission-create-b9cdl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9663d676f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b9cdl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9663d676f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=526d9905-de8c-47f1-9baf-9dfde367eddc,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=526d9905-de8c-47f1-9baf-9dfde367eddc,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b9cdl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=526d9905-de8c-47f1-9baf-9dfde367eddc;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=526d9905-de8c-47f1-9baf-9dfde367eddc;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9663d676f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=43317 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=526d9905-de8c-47f1-9baf-9dfde367eddc,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=526d9905-de8c-47f1-9baf-9dfde367eddc,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b9cdl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9663d676f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=43317 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b9cdl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9663d676f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=166 identity=43317 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b9cdl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9663d676f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=166 identity=43317 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b9cdl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f9663d676f endpointID=166 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-b9cdl subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=526d9905-de8c-47f1-9baf-9dfde367eddc k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=526d9905-de8c-47f1-9baf-9dfde367eddc k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f9663d676f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=166 identity=43317 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b9cdl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 c70a4af5-8df0-4e0a-8caf-35e0f09e7470 default }" containerID=2614e685ede22a96dc121f8aa28cce6da1dea059dddf5432878dd454d6851c5f datapathConfiguration="&{false false false false false }" interface=lxcd50b3fb70346 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-skb4x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2614e685ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-skb4x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2614e685ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-skb4x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.147 ff2d4535-36f3-4e6d-91bb-445c229e9543 default }" containerID=b222015db2ac1f7e71d06b1d3cb72ab249e6960a6a5d682eb62fd11567cf8d73 datapathConfiguration="&{false false false false false }" interface=lxc58ec68a0b3ce k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-m259p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b222015db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-m259p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b222015db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-m259p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b222015db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-m259p line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=2614e685ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-skb4x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2614e685ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identity=65399 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-skb4x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2614e685ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identity=65399 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-skb4x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b222015db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identity=25995 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-m259p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b222015db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identity=25995 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-m259p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 28291cb0-eb3e-42b7-a735-d9209b65ab3b default }" containerID=7eeca45d3165042ede40555cdfd0aa6ded238b61d4798fc9e35f6bf8743b02fb datapathConfiguration="&{false false false false false }" interface=lxc3b0b11f92e4b k8sPodName=monitoring/kube-prometheus-stack-grafana-6cc86bb89d-jhzjd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7eeca45d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cc86bb89d-jhzjd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7eeca45d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cc86bb89d-jhzjd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7eeca45d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 identity=6682 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cc86bb89d-jhzjd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7eeca45d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 identity=6682 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cc86bb89d-jhzjd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b222015db2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=358 identity=25995 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-m259p subsys=endpoint level=info msg="Successful endpoint creation" containerID=b222015db2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=358 identity=25995 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-m259p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2614e685ed datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=300 identity=65399 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-skb4x subsys=endpoint level=info msg="Successful endpoint creation" containerID=2614e685ed datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=300 identity=65399 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-skb4x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7eeca45d31 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2795 identity=6682 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cc86bb89d-jhzjd subsys=endpoint level=info msg="Successful endpoint creation" containerID=7eeca45d31 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2795 identity=6682 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cc86bb89d-jhzjd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 d5e865e6-cac7-4c0d-a94e-c773603efaf9 default }" containerID=07e8be3882ec523a8f574ce535b8703a7da2f87312ebe9b709efb802022f6b60 datapathConfiguration="&{false false false false false }" interface=lxcea5def1951ff k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h79pm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07e8be3882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1826 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h79pm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07e8be3882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1826 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=dc7983cf-eec2-4036-989f-fb72d3eb64e7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=dc7983cf-eec2-4036-989f-fb72d3eb64e7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h79pm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=dc7983cf-eec2-4036-989f-fb72d3eb64e7;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=dc7983cf-eec2-4036-989f-fb72d3eb64e7;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07e8be3882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1826 identity=56162 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=dc7983cf-eec2-4036-989f-fb72d3eb64e7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=dc7983cf-eec2-4036-989f-fb72d3eb64e7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h79pm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07e8be3882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1826 identity=56162 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h79pm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=07e8be3882 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1826 identity=56162 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h79pm subsys=endpoint level=info msg="Successful endpoint creation" containerID=07e8be3882 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1826 identity=56162 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h79pm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=07e8be3882 endpointID=1826 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-h79pm subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=dc7983cf-eec2-4036-989f-fb72d3eb64e7 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=dc7983cf-eec2-4036-989f-fb72d3eb64e7 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=07e8be3882 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1826 identity=56162 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h79pm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 8f2a4ae6-0337-4def-8c0d-447c87a268b9 default }" containerID=00b9557f89504365a8411c638b6d7d5c786c4552d1268822568766f1d533a8a2 datapathConfiguration="&{false false false false false }" interface=lxc2d431d54dec3 k8sPodName=local-path-storage/helper-pod-create-pvc-05d0f38a-a824-40e2-baf2-fd889421429b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00b9557f89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05d0f38a-a824-40e2-baf2-fd889421429b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00b9557f89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05d0f38a-a824-40e2-baf2-fd889421429b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00b9557f89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 identity=6843 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05d0f38a-a824-40e2-baf2-fd889421429b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00b9557f89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1 identity=6843 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05d0f38a-a824-40e2-baf2-fd889421429b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00b9557f89 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1 identity=6843 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05d0f38a-a824-40e2-baf2-fd889421429b subsys=endpoint level=info msg="Successful endpoint creation" containerID=00b9557f89 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1 identity=6843 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05d0f38a-a824-40e2-baf2-fd889421429b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.197 39b567f2-d118-4e80-a6bf-352be830582b default }" containerID=3a6e6037e81ffd2c86ebadd5e19ba7baf8befff5d336d31ba45e329e50a4af0f datapathConfiguration="&{false false false false false }" interface=lxcec131e15db50 k8sPodName=local-path-storage/helper-pod-create-pvc-b46c88b5-2b94-452a-97f8-96c0753541f3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a6e6037e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b46c88b5-2b94-452a-97f8-96c0753541f3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a6e6037e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b46c88b5-2b94-452a-97f8-96c0753541f3 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3a6e6037e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identity=6843 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b46c88b5-2b94-452a-97f8-96c0753541f3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a6e6037e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identity=6843 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b46c88b5-2b94-452a-97f8-96c0753541f3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a6e6037e8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1733 identity=6843 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b46c88b5-2b94-452a-97f8-96c0753541f3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a6e6037e8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1733 identity=6843 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b46c88b5-2b94-452a-97f8-96c0753541f3 subsys=daemon level=info msg="Delete endpoint request" containerID=3a6e6037e8 endpointID=1733 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b46c88b5-2b94-452a-97f8-96c0753541f3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=00b9557f89 endpointID=1 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-05d0f38a-a824-40e2-baf2-fd889421429b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3a6e6037e8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1733 identity=6843 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b46c88b5-2b94-452a-97f8-96c0753541f3 subsys=endpoint level=info msg="Removed endpoint" containerID=00b9557f89 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1 identity=6843 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05d0f38a-a824-40e2-baf2-fd889421429b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 26890597-6de7-4ada-be8a-88183f70d1be default }" containerID=1588a4a959f5e6b5051a398f71021afde0b46c594e3827f312634f11a510f8cd datapathConfiguration="&{false false false false false }" interface=lxc13ce5d8d48d5 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1588a4a959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2673 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1588a4a959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2673 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1588a4a959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2673 identity=15413 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1588a4a959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2673 identity=15413 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1588a4a959 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2673 identity=15413 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1588a4a959 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2673 identity=15413 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.82 c0f51429-594c-4a0e-8161-881e48b92cc5 default }" containerID=1653aa9a081d9cb4bca072b65e038d8e9087179ea5abf263fcbdd9eaf5e1a068 datapathConfiguration="&{false false false false false }" interface=lxc579742ff8988 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1653aa9a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2453 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1653aa9a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2453 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1653aa9a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2453 identity=39176 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1653aa9a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2453 identity=39176 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1653aa9a08 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2453 identity=39176 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1653aa9a08 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2453 identity=39176 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.52 5ab4d3ee-161d-4793-98e2-c59fa3d8b892 default }" containerID=4fd1beff78127e330c2e8c2a63bd38edd67e7162765ed57b74cad243d1e0aad2 datapathConfiguration="&{false false false false false }" interface=lxc35e422d0b64e k8sPodName=monitoring/loki-gateway-5cc45946cd-nt2ws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fd1beff78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-nt2ws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fd1beff78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-nt2ws subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fd1beff78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identity=13692 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-nt2ws oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fd1beff78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identity=13692 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-nt2ws subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4fd1beff78 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=266 identity=13692 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-nt2ws subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fd1beff78 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=266 identity=13692 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-nt2ws subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.111 088b3ada-a53d-4aeb-aeda-0e6e59ccb845 default }" containerID=411784962a2f560956ba83d90401e18bbf5b5241faea0476c9c487fc52714e69 datapathConfiguration="&{false false false false false }" interface=lxc6ce9b9fd2a99 k8sPodName=local-path-storage/helper-pod-create-pvc-0b3ba873-aadc-4c98-8770-e40415424ec2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=411784962a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b3ba873-aadc-4c98-8770-e40415424ec2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=411784962a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b3ba873-aadc-4c98-8770-e40415424ec2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=411784962a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identity=6843 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b3ba873-aadc-4c98-8770-e40415424ec2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=411784962a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identity=6843 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b3ba873-aadc-4c98-8770-e40415424ec2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=411784962a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1918 identity=6843 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b3ba873-aadc-4c98-8770-e40415424ec2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=411784962a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1918 identity=6843 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b3ba873-aadc-4c98-8770-e40415424ec2 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 1a1dc81d-fb7b-472c-bb17-bdb574d6ae91 default }" containerID=ec59e6915d2f4d27dea20033aa56aecef37135f79ba76df3f2bfa0ec2c33a248 datapathConfiguration="&{false false false false false }" interface=lxccb23f10affe6 k8sPodName=monitoring/vector-bqjj4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec59e6915d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3353 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-bqjj4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec59e6915d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3353 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-bqjj4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Delete endpoint request" containerID=411784962a endpointID=1918 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0b3ba873-aadc-4c98-8770-e40415424ec2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec59e6915d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3353 identity=6744 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-bqjj4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec59e6915d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3353 identity=6744 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-bqjj4 subsys=endpoint level=info msg="Removed endpoint" containerID=411784962a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1918 identity=6843 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b3ba873-aadc-4c98-8770-e40415424ec2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec59e6915d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3353 identity=6744 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-bqjj4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec59e6915d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3353 identity=6744 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-bqjj4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.38 9f6cb236-0a7a-4cb3-aad9-886520b45fbb default }" containerID=5b2b6485b181712ac03665df1e800847a12f10e44ade6fc0fc0c2de28738bb25 datapathConfiguration="&{false false false false false }" interface=lxc00a3f86965f0 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b2b6485b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b2b6485b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5b2b6485b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b2b6485b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identity=9463 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b2b6485b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identity=9463 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b2b6485b1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=227 identity=9463 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b2b6485b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=227 identity=9463 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.206 ea4214b7-09b4-4976-9dde-9ecec01753af default }" containerID=5ce49f10c5413ec034fad73d9bcab32c5567359557109df0545542c032dbfe6a datapathConfiguration="&{false false false false false }" interface=lxcf05bc07e58e4 k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-rrqpd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ce49f10c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-rrqpd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ce49f10c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-rrqpd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=prometheus-pushgateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=prometheus-pushgateway;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ce49f10c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 identity=54975 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-rrqpd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ce49f10c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 identity=54975 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-rrqpd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5ce49f10c5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2249 identity=54975 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-rrqpd subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ce49f10c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2249 identity=54975 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-rrqpd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.46 ceb4a62d-45ae-4ee6-8a6d-067d65fcedf3 default }" containerID=5188cdc43758cc63fc2d3b14f38a05912527cdbf861ba9b2ac4ac777031e527e datapathConfiguration="&{false false false false false }" interface=lxc18963f72c335 k8sPodName=openstack/memcached-memcached-c47d949f5-jn96b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5188cdc437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3025 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-jn96b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5188cdc437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3025 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-jn96b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5188cdc437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3025 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.46 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-jn96b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5188cdc437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3025 identity=29511 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-jn96b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5188cdc437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3025 identity=29511 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-jn96b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5188cdc437 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3025 identity=29511 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-jn96b subsys=endpoint level=info msg="Successful endpoint creation" containerID=5188cdc437 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3025 identity=29511 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-jn96b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.50 f6c3d44c-fe44-43fd-b016-8d7c061d97b5 default }" containerID=79527ffca4a5e7b936d12f7d601465091d6385e8a24f34d860741d486b4f6729 datapathConfiguration="&{false false false false false }" interface=lxcf0e70fc4caef k8sPodName=local-path-storage/helper-pod-create-pvc-c015ec0b-4bd9-43eb-8627-a1a58623e12a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79527ffca4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c015ec0b-4bd9-43eb-8627-a1a58623e12a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79527ffca4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c015ec0b-4bd9-43eb-8627-a1a58623e12a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79527ffca4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identity=6843 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c015ec0b-4bd9-43eb-8627-a1a58623e12a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79527ffca4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identity=6843 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c015ec0b-4bd9-43eb-8627-a1a58623e12a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79527ffca4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1053 identity=6843 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c015ec0b-4bd9-43eb-8627-a1a58623e12a subsys=endpoint level=info msg="Successful endpoint creation" containerID=79527ffca4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1053 identity=6843 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c015ec0b-4bd9-43eb-8627-a1a58623e12a subsys=daemon level=info msg="Delete endpoint request" containerID=79527ffca4 endpointID=1053 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c015ec0b-4bd9-43eb-8627-a1a58623e12a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=79527ffca4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1053 identity=6843 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c015ec0b-4bd9-43eb-8627-a1a58623e12a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 d05b7fcd-a456-4950-b0f8-555c5241c05d default }" containerID=ce7948323ff9c1395ce8e9ef05c6a3c4eeb2839d22704ba2e58145c1c031e510 datapathConfiguration="&{false false false false false }" interface=lxcc4a7be3691c2 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce7948323f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce7948323f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce7948323f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identity=44945 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ce7948323f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identity=44945 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce7948323f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1410 identity=44945 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce7948323f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1410 identity=44945 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 fc23d907-ff6f-4aa8-950e-d43c573a62fc default }" containerID=92963ac62eff4da832f6bd8e7ae8dcccf2d0ea1950099b3ef0ee2506949ac007 datapathConfiguration="&{false false false false false }" interface=lxcf9fc0baddd57 k8sPodName=openstack/keystone-api-6f6bc6848d-jz7bw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92963ac62e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-api-6f6bc6848d-jz7bw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92963ac62e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-api-6f6bc6848d-jz7bw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92963ac62e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=56003 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-api-6f6bc6848d-jz7bw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92963ac62e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=56003 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-api-6f6bc6848d-jz7bw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.117 bb955e45-3fd6-400a-9549-c12934381043 default }" containerID=613525ee18681b7be0e6a76519a4117386ff444b9e02d4580b6040f2084873a7 datapathConfiguration="&{false false false false false }" interface=lxc16a365f244d8 k8sPodName=openstack/keystone-credential-setup-rjqnm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=613525ee18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4006 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-credential-setup-rjqnm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=613525ee18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4006 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=90f10062-3129-41ec-8606-ac643f9b5e69,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=90f10062-3129-41ec-8606-ac643f9b5e69,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-credential-setup-rjqnm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=90f10062-3129-41ec-8606-ac643f9b5e69;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=90f10062-3129-41ec-8606-ac643f9b5e69;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=613525ee18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4006 identity=11279 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=90f10062-3129-41ec-8606-ac643f9b5e69,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=90f10062-3129-41ec-8606-ac643f9b5e69,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-credential-setup-rjqnm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=613525ee18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4006 identity=11279 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-credential-setup-rjqnm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92963ac62e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1068 identity=56003 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-api-6f6bc6848d-jz7bw subsys=endpoint level=info msg="Successful endpoint creation" containerID=92963ac62e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1068 identity=56003 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-api-6f6bc6848d-jz7bw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=613525ee18 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4006 identity=11279 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-credential-setup-rjqnm subsys=endpoint level=info msg="Successful endpoint creation" containerID=613525ee18 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4006 identity=11279 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-credential-setup-rjqnm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=613525ee18 endpointID=4006 k8sNamespace=openstack k8sPodName=keystone-credential-setup-rjqnm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=90f10062-3129-41ec-8606-ac643f9b5e69 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=90f10062-3129-41ec-8606-ac643f9b5e69 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=613525ee18 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4006 identity=11279 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-credential-setup-rjqnm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 04c5e43b-5d94-4b16-ac82-11d479182f18 default }" containerID=76824b344492aed4b2f7fdc96623b3f13e684903e29f1721c14b5d95cb4f886f datapathConfiguration="&{false false false false false }" interface=lxc8685e9e5f509 k8sPodName=openstack/keystone-db-init-kltdm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76824b3444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-db-init-kltdm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76824b3444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fe3687de-ad72-4540-9b80-e23c80074ed0,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=fe3687de-ad72-4540-9b80-e23c80074ed0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-db-init-kltdm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fe3687de-ad72-4540-9b80-e23c80074ed0;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=fe3687de-ad72-4540-9b80-e23c80074ed0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76824b3444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identity=65205 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fe3687de-ad72-4540-9b80-e23c80074ed0,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=fe3687de-ad72-4540-9b80-e23c80074ed0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-db-init-kltdm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76824b3444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identity=65205 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-db-init-kltdm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=76824b3444 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=770 identity=65205 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-db-init-kltdm subsys=endpoint level=info msg="Successful endpoint creation" containerID=76824b3444 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=770 identity=65205 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-db-init-kltdm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=76824b3444 endpointID=770 k8sNamespace=openstack k8sPodName=keystone-db-init-kltdm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fe3687de-ad72-4540-9b80-e23c80074ed0 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=fe3687de-ad72-4540-9b80-e23c80074ed0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=76824b3444 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=770 identity=65205 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-db-init-kltdm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 70515624-1eda-4cbc-819b-3d54a19527ff default }" containerID=91d28cf983103461fe1bcdde9b83cd57b4698b689def73260e2d7cef1ea2f763 datapathConfiguration="&{false false false false false }" interface=lxcc4d8bd8a5cc6 k8sPodName=openstack/keystone-fernet-setup-79c5m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91d28cf983 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-79c5m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91d28cf983 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=49f1b186-7a30-401c-aef3-fd1e71bfd13f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=49f1b186-7a30-401c-aef3-fd1e71bfd13f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-79c5m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=49f1b186-7a30-401c-aef3-fd1e71bfd13f;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=49f1b186-7a30-401c-aef3-fd1e71bfd13f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91d28cf983 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identity=25618 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=49f1b186-7a30-401c-aef3-fd1e71bfd13f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=49f1b186-7a30-401c-aef3-fd1e71bfd13f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-79c5m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91d28cf983 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identity=25618 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-79c5m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=91d28cf983 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1217 identity=25618 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-79c5m subsys=endpoint level=info msg="Successful endpoint creation" containerID=91d28cf983 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1217 identity=25618 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-79c5m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=91d28cf983 endpointID=1217 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-79c5m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=49f1b186-7a30-401c-aef3-fd1e71bfd13f k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=49f1b186-7a30-401c-aef3-fd1e71bfd13f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=91d28cf983 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1217 identity=25618 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-79c5m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 17455319-fdcc-43ab-8095-f49a2cfa479c default }" containerID=1ab38a95e358c9aad53f93c897e0d828492569a27f7073e57534c6bba834d4c2 datapathConfiguration="&{false false false false false }" interface=lxc16c6bb438fc6 k8sPodName=openstack/keystone-db-sync-l5dm9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ab38a95e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-sync-l5dm9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ab38a95e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5cf025a4-7f4c-4134-b355-5d6c9a02fc3d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=5cf025a4-7f4c-4134-b355-5d6c9a02fc3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-sync-l5dm9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5cf025a4-7f4c-4134-b355-5d6c9a02fc3d;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=5cf025a4-7f4c-4134-b355-5d6c9a02fc3d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ab38a95e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=31728 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5cf025a4-7f4c-4134-b355-5d6c9a02fc3d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=5cf025a4-7f4c-4134-b355-5d6c9a02fc3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-sync-l5dm9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ab38a95e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=31728 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-sync-l5dm9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1ab38a95e3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=481 identity=31728 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-sync-l5dm9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ab38a95e3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=481 identity=31728 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-sync-l5dm9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ab38a95e3 endpointID=481 k8sNamespace=openstack k8sPodName=keystone-db-sync-l5dm9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5cf025a4-7f4c-4134-b355-5d6c9a02fc3d k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=5cf025a4-7f4c-4134-b355-5d6c9a02fc3d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1ab38a95e3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=481 identity=31728 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-sync-l5dm9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 9e5948fb-bd79-424c-8eff-fd9c988a7a53 default }" containerID=3e8f4e9d8de5ad23e3e36cfdd66809a5b8eea3272c58e5cb43b773293d7b9bf9 datapathConfiguration="&{false false false false false }" interface=lxc25dfb5bb1c9f k8sPodName=openstack/keystone-rabbit-init-mjvp9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e8f4e9d8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-rabbit-init-mjvp9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e8f4e9d8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1b17d8d4-2aa9-4e2e-bd41-b1e80cac2bda,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1b17d8d4-2aa9-4e2e-bd41-b1e80cac2bda,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-rabbit-init-mjvp9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1b17d8d4-2aa9-4e2e-bd41-b1e80cac2bda;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1b17d8d4-2aa9-4e2e-bd41-b1e80cac2bda;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e8f4e9d8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 identity=34972 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1b17d8d4-2aa9-4e2e-bd41-b1e80cac2bda,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1b17d8d4-2aa9-4e2e-bd41-b1e80cac2bda,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-rabbit-init-mjvp9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3e8f4e9d8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 identity=34972 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-rabbit-init-mjvp9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e8f4e9d8d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1824 identity=34972 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-rabbit-init-mjvp9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e8f4e9d8d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1824 identity=34972 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-rabbit-init-mjvp9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e8f4e9d8d endpointID=1824 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-mjvp9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1b17d8d4-2aa9-4e2e-bd41-b1e80cac2bda k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1b17d8d4-2aa9-4e2e-bd41-b1e80cac2bda k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3e8f4e9d8d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1824 identity=34972 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-rabbit-init-mjvp9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 66f15954-a054-4a5a-959f-666a97fffc17 default }" containerID=eaf18b82cd3980433b283b1b40ea49e504c7806cbb58fd3cc31dcc2517070f2e datapathConfiguration="&{false false false false false }" interface=lxc8ab610b4df0e k8sPodName=openstack/keystone-domain-manage-hlm64 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eaf18b82cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3307 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/keystone-domain-manage-hlm64 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eaf18b82cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3307 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3ff19d4d-d4ca-4743-bda6-dc8aef10f735,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3ff19d4d-d4ca-4743-bda6-dc8aef10f735,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/keystone-domain-manage-hlm64 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eaf18b82cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3307 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.177 ipv6= k8sPodName=openstack/keystone-domain-manage-hlm64 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3ff19d4d-d4ca-4743-bda6-dc8aef10f735;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=3ff19d4d-d4ca-4743-bda6-dc8aef10f735;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eaf18b82cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3307 identity=15764 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3ff19d4d-d4ca-4743-bda6-dc8aef10f735,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3ff19d4d-d4ca-4743-bda6-dc8aef10f735,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/keystone-domain-manage-hlm64 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eaf18b82cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3307 identity=15764 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/keystone-domain-manage-hlm64 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eaf18b82cd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3307 identity=15764 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/keystone-domain-manage-hlm64 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eaf18b82cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3307 identity=15764 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/keystone-domain-manage-hlm64 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eaf18b82cd endpointID=3307 k8sNamespace=openstack k8sPodName=keystone-domain-manage-hlm64 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3ff19d4d-d4ca-4743-bda6-dc8aef10f735 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=3ff19d4d-d4ca-4743-bda6-dc8aef10f735 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=eaf18b82cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3307 identity=15764 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/keystone-domain-manage-hlm64 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 ee1e880c-67d3-4b8a-b1f9-11d75c8421c1 default }" containerID=b340ae08560f783d8e2f2df744a443d06a9b1be65a358a958f2902c7515b1c0b datapathConfiguration="&{false false false false false }" interface=lxca0a647df4b9e k8sPodName=openstack/keystone-bootstrap-57j45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b340ae0856 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-bootstrap-57j45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b340ae0856 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c37b1aa1-4ab7-48c1-b446-3e22fade8b65,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c37b1aa1-4ab7-48c1-b446-3e22fade8b65,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-bootstrap-57j45 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b340ae0856 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-bootstrap-57j45 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c37b1aa1-4ab7-48c1-b446-3e22fade8b65;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=c37b1aa1-4ab7-48c1-b446-3e22fade8b65;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b340ae0856 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 identity=18980 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c37b1aa1-4ab7-48c1-b446-3e22fade8b65,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c37b1aa1-4ab7-48c1-b446-3e22fade8b65,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-bootstrap-57j45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b340ae0856 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 identity=18980 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-bootstrap-57j45 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b340ae0856 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2387 identity=18980 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-bootstrap-57j45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b340ae0856 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2387 identity=18980 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-bootstrap-57j45 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b340ae0856 endpointID=2387 k8sNamespace=openstack k8sPodName=keystone-bootstrap-57j45 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c37b1aa1-4ab7-48c1-b446-3e22fade8b65 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=c37b1aa1-4ab7-48c1-b446-3e22fade8b65 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b340ae0856 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2387 identity=18980 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-bootstrap-57j45 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 8e307003-f754-4cfd-8edb-494395080e78 default }" containerID=fe716e8a631a9b2bbdd3a432a5636915797c270eed44b3e12d354d8ec444ae00 datapathConfiguration="&{false false false false false }" interface=lxc9ea928223047 k8sPodName=local-path-storage/helper-pod-create-pvc-978ae5db-a8e4-4a62-bed2-7485fb377b48 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe716e8a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-978ae5db-a8e4-4a62-bed2-7485fb377b48 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe716e8a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-978ae5db-a8e4-4a62-bed2-7485fb377b48 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe716e8a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 identity=6843 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-978ae5db-a8e4-4a62-bed2-7485fb377b48 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe716e8a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 identity=6843 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-978ae5db-a8e4-4a62-bed2-7485fb377b48 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe716e8a63 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4084 identity=6843 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-978ae5db-a8e4-4a62-bed2-7485fb377b48 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe716e8a63 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4084 identity=6843 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-978ae5db-a8e4-4a62-bed2-7485fb377b48 subsys=daemon level=info msg="Delete endpoint request" containerID=fe716e8a63 endpointID=4084 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-978ae5db-a8e4-4a62-bed2-7485fb377b48 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fe716e8a63 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4084 identity=6843 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-978ae5db-a8e4-4a62-bed2-7485fb377b48 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 5fc224db-34d5-46e3-a8dc-1ce2cf435484 default }" containerID=21ef532fd21353d7acf5fdb62cc6081cf3b93487d72995819800c494d9e6cf4c datapathConfiguration="&{false false false false false }" interface=lxc0efe8592beca k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21ef532fd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21ef532fd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=21ef532fd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21ef532fd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identity=8941 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21ef532fd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identity=8941 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=21ef532fd2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=204 identity=8941 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=21ef532fd2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=204 identity=8941 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.194 b4c46408-d952-4584-924b-5b148d882f83 default }" containerID=f074136a39d899a8b3c33a7ea45b68fc79ba3cd48af72e7c56b967c7dce2ad54 datapathConfiguration="&{false false false false false }" interface=lxc75526419d00b k8sPodName=openstack/barbican-api-58fc878684-9zprm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f074136a39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-api-58fc878684-9zprm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f074136a39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-api-58fc878684-9zprm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f074136a39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 identity=4678 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-api-58fc878684-9zprm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f074136a39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 identity=4678 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-api-58fc878684-9zprm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 12a58051-4cd7-40ba-8c59-6e7fbcf195b2 default }" containerID=24e64049ba58299121c492f21f99e17d8073cd1b270803e282dd532f3b1df670 datapathConfiguration="&{false false false false false }" interface=lxc0a00cd409405 k8sPodName=openstack/barbican-db-init-fjcvr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24e64049ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-db-init-fjcvr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24e64049ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8f15abbe-42dd-48b9-a94a-148f35cd30a0,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=8f15abbe-42dd-48b9-a94a-148f35cd30a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-db-init-fjcvr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8f15abbe-42dd-48b9-a94a-148f35cd30a0;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=8f15abbe-42dd-48b9-a94a-148f35cd30a0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24e64049ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=15337 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8f15abbe-42dd-48b9-a94a-148f35cd30a0,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=8f15abbe-42dd-48b9-a94a-148f35cd30a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-db-init-fjcvr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24e64049ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=15337 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-db-init-fjcvr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f074136a39 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2235 identity=4678 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-api-58fc878684-9zprm subsys=endpoint level=info msg="Successful endpoint creation" containerID=f074136a39 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2235 identity=4678 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-api-58fc878684-9zprm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=24e64049ba datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=16 identity=15337 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-db-init-fjcvr subsys=endpoint level=info msg="Successful endpoint creation" containerID=24e64049ba datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=16 identity=15337 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-db-init-fjcvr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=24e64049ba endpointID=16 k8sNamespace=openstack k8sPodName=barbican-db-init-fjcvr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8f15abbe-42dd-48b9-a94a-148f35cd30a0 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=8f15abbe-42dd-48b9-a94a-148f35cd30a0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=24e64049ba datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=16 identity=15337 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-db-init-fjcvr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 681caccd-bb0e-4be3-9398-23f99515094f default }" containerID=31e873a28e044ba049b1099fb3c2de38326ecbd760d3aaa45baf79fc959b22c9 datapathConfiguration="&{false false false false false }" interface=lxcfd3e4354516a k8sPodName=openstack/barbican-db-sync-lvsrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31e873a28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-db-sync-lvsrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31e873a28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=614b299e-bad4-4112-97a2-e55835175cde,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=614b299e-bad4-4112-97a2-e55835175cde,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-db-sync-lvsrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=614b299e-bad4-4112-97a2-e55835175cde;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=614b299e-bad4-4112-97a2-e55835175cde;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=31e873a28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-db-sync-lvsrt line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=31e873a28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 identity=13020 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=614b299e-bad4-4112-97a2-e55835175cde,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=614b299e-bad4-4112-97a2-e55835175cde,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-db-sync-lvsrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31e873a28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 identity=13020 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-db-sync-lvsrt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31e873a28e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3430 identity=13020 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-db-sync-lvsrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=31e873a28e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3430 identity=13020 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-db-sync-lvsrt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=31e873a28e endpointID=3430 k8sNamespace=openstack k8sPodName=barbican-db-sync-lvsrt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=614b299e-bad4-4112-97a2-e55835175cde k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=614b299e-bad4-4112-97a2-e55835175cde k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=31e873a28e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3430 identity=13020 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-db-sync-lvsrt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 6a46b73f-7c21-4423-9a43-6fdc932d682d default }" containerID=d32c713508900e3306e00847b169f2ec8fd979e7f27e5c7703f1eada811ddeb9 datapathConfiguration="&{false false false false false }" interface=lxc7afd6c317c08 k8sPodName=openstack/barbican-rabbit-init-rsbkp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d32c713508 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3416 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-rabbit-init-rsbkp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d32c713508 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3416 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=06daa6d9-9aef-4cdf-9c2f-a85453109c5e,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=06daa6d9-9aef-4cdf-9c2f-a85453109c5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-rabbit-init-rsbkp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=06daa6d9-9aef-4cdf-9c2f-a85453109c5e;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=06daa6d9-9aef-4cdf-9c2f-a85453109c5e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d32c713508 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3416 identity=7303 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=06daa6d9-9aef-4cdf-9c2f-a85453109c5e,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=06daa6d9-9aef-4cdf-9c2f-a85453109c5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-rabbit-init-rsbkp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d32c713508 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3416 identity=7303 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-rabbit-init-rsbkp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d32c713508 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3416 identity=7303 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-rabbit-init-rsbkp subsys=endpoint level=info msg="Successful endpoint creation" containerID=d32c713508 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3416 identity=7303 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-rabbit-init-rsbkp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d32c713508 endpointID=3416 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-rsbkp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=06daa6d9-9aef-4cdf-9c2f-a85453109c5e k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=06daa6d9-9aef-4cdf-9c2f-a85453109c5e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d32c713508 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3416 identity=7303 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-rabbit-init-rsbkp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 e779e767-a338-4e84-927b-0b34a3eb4228 default }" containerID=2cc7c07f6e234f5f780da55fb68348a5bf49b8ed5af00a8702fbffc7fb0c1bc2 datapathConfiguration="&{false false false false false }" interface=lxc0c466a6947d3 k8sPodName=openstack/barbican-ks-service-zvsqm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2cc7c07f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-service-zvsqm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2cc7c07f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8a56ab48-620e-4125-94d0-928fb259d245,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=8a56ab48-620e-4125-94d0-928fb259d245,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-service-zvsqm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8a56ab48-620e-4125-94d0-928fb259d245;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=8a56ab48-620e-4125-94d0-928fb259d245;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2cc7c07f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identity=16988 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8a56ab48-620e-4125-94d0-928fb259d245,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=8a56ab48-620e-4125-94d0-928fb259d245,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-service-zvsqm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2cc7c07f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identity=16988 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-service-zvsqm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2cc7c07f6e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=621 identity=16988 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-service-zvsqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=2cc7c07f6e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=621 identity=16988 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-service-zvsqm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2cc7c07f6e endpointID=621 k8sNamespace=openstack k8sPodName=barbican-ks-service-zvsqm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8a56ab48-620e-4125-94d0-928fb259d245 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=8a56ab48-620e-4125-94d0-928fb259d245 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2cc7c07f6e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=621 identity=16988 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-service-zvsqm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 3631e05a-2501-4a36-bb8f-819446f923a3 default }" containerID=094bab3db1687472243de7ac4ab20eb386de302b5e12d5b36ebe60b7dc8c556d datapathConfiguration="&{false false false false false }" interface=lxc5c085be2770a k8sPodName=openstack/barbican-ks-endpoints-87fh9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=094bab3db1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-endpoints-87fh9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=094bab3db1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=55dcfc7b-1b6f-4cfc-ade0-d6bd60fbb6b2,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=55dcfc7b-1b6f-4cfc-ade0-d6bd60fbb6b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-endpoints-87fh9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=094bab3db1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-endpoints-87fh9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=55dcfc7b-1b6f-4cfc-ade0-d6bd60fbb6b2;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=55dcfc7b-1b6f-4cfc-ade0-d6bd60fbb6b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=094bab3db1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identity=18721 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=55dcfc7b-1b6f-4cfc-ade0-d6bd60fbb6b2,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=55dcfc7b-1b6f-4cfc-ade0-d6bd60fbb6b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-endpoints-87fh9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=094bab3db1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identity=18721 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-endpoints-87fh9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=094bab3db1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2799 identity=18721 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-endpoints-87fh9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=094bab3db1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2799 identity=18721 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-endpoints-87fh9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=094bab3db1 endpointID=2799 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-87fh9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=55dcfc7b-1b6f-4cfc-ade0-d6bd60fbb6b2 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=55dcfc7b-1b6f-4cfc-ade0-d6bd60fbb6b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=094bab3db1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2799 identity=18721 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-endpoints-87fh9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 9837d2ca-ae06-43a3-b0d8-60ca7ec6485d default }" containerID=67c62d8e3dc72498822663c23820a2b8af027b06474af2beaca5ffb05fe82386 datapathConfiguration="&{false false false false false }" interface=lxc4d1eb37b88fd k8sPodName=openstack/barbican-ks-user-5p9wl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67c62d8e3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2282 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-5p9wl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67c62d8e3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2282 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bf16fafe-f754-43ca-9bd2-5a3a98219631,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=bf16fafe-f754-43ca-9bd2-5a3a98219631,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-5p9wl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=67c62d8e3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2282 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-5p9wl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bf16fafe-f754-43ca-9bd2-5a3a98219631;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=bf16fafe-f754-43ca-9bd2-5a3a98219631;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67c62d8e3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2282 identity=36488 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bf16fafe-f754-43ca-9bd2-5a3a98219631,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=bf16fafe-f754-43ca-9bd2-5a3a98219631,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-5p9wl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67c62d8e3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2282 identity=36488 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-5p9wl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67c62d8e3d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2282 identity=36488 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-5p9wl subsys=endpoint level=info msg="Successful endpoint creation" containerID=67c62d8e3d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2282 identity=36488 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-5p9wl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=67c62d8e3d endpointID=2282 k8sNamespace=openstack k8sPodName=barbican-ks-user-5p9wl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bf16fafe-f754-43ca-9bd2-5a3a98219631 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=bf16fafe-f754-43ca-9bd2-5a3a98219631 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=67c62d8e3d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2282 identity=36488 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-5p9wl subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.29 14b0221b-e0a9-4fc3-b452-dfcfc0b6a8cd default }" containerID=4ebf784ac3bc7dbcd2d27f183bfc0cc8467959f701cbef4814f7a9176d4a5c1e datapathConfiguration="&{false false false false false }" interface=lxc81d9cf60757f k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-ksqvn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ebf784ac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 ipv4=10.0.0.29 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-ksqvn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ebf784ac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.29 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-ksqvn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4ebf784ac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.29 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-ksqvn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.10.10;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ebf784ac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 identity=58890 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.29 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-ksqvn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ebf784ac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 identity=58890 ipv4=10.0.0.29 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-ksqvn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ebf784ac3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=99 identity=58890 ipv4=10.0.0.29 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-ksqvn subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ebf784ac3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=99 identity=58890 ipv4=10.0.0.29 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-ksqvn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03783462063927929 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.249 9128d8ea-c69e-4d07-bf18-09e6945bce68 default }" containerID=579bea31e7db354cebc512f6b5ce1edff8c4f8ff1e029c56c00bfcd54e2f50e8 datapathConfiguration="&{false false false false false }" interface=lxc8ac7a2dababe k8sPodName=openstack/rook-ceph-detect-version-67bbn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=579bea31e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-detect-version-67bbn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=579bea31e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=0e5f3ac6-8363-4257-8be3-d6ff4e83e340,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=0e5f3ac6-8363-4257-8be3-d6ff4e83e340,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-detect-version-67bbn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=0e5f3ac6-8363-4257-8be3-d6ff4e83e340;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=0e5f3ac6-8363-4257-8be3-d6ff4e83e340;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=579bea31e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 identity=21859 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=0e5f3ac6-8363-4257-8be3-d6ff4e83e340,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=0e5f3ac6-8363-4257-8be3-d6ff4e83e340,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-detect-version-67bbn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=579bea31e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 identity=21859 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-detect-version-67bbn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=579bea31e7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=843 identity=21859 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-detect-version-67bbn subsys=endpoint level=info msg="Successful endpoint creation" containerID=579bea31e7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=843 identity=21859 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-detect-version-67bbn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=579bea31e7 endpointID=843 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-67bbn subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=0e5f3ac6-8363-4257-8be3-d6ff4e83e340 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=0e5f3ac6-8363-4257-8be3-d6ff4e83e340 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=579bea31e7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=843 identity=21859 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-detect-version-67bbn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 3b290e06-c5f9-470b-8838-d3688036986d default }" containerID=37c562d4cf8ea7a95d881d5ee54473bd3eb496842fe9214eacf0332aa435365a datapathConfiguration="&{false false false false false }" interface=lxcb4b992769eaa k8sPodName=local-path-storage/helper-pod-create-pvc-66d66f03-e134-473b-84ef-16142e4d14fd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37c562d4cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66d66f03-e134-473b-84ef-16142e4d14fd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37c562d4cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66d66f03-e134-473b-84ef-16142e4d14fd subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37c562d4cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 identity=6843 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66d66f03-e134-473b-84ef-16142e4d14fd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37c562d4cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 identity=6843 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66d66f03-e134-473b-84ef-16142e4d14fd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37c562d4cf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2268 identity=6843 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66d66f03-e134-473b-84ef-16142e4d14fd subsys=endpoint level=info msg="Successful endpoint creation" containerID=37c562d4cf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2268 identity=6843 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66d66f03-e134-473b-84ef-16142e4d14fd subsys=daemon level=info msg="Delete endpoint request" containerID=37c562d4cf endpointID=2268 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-66d66f03-e134-473b-84ef-16142e4d14fd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=37c562d4cf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2268 identity=6843 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66d66f03-e134-473b-84ef-16142e4d14fd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 084633d3-ea57-48ab-ab67-5198f9cc57b7 default }" containerID=4207e5690d46375693291062c7c58665ca28c82229ac355c70345402c6777850 datapathConfiguration="&{false false false false false }" interface=lxcf3cdd7320890 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4207e5690d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4207e5690d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4207e5690d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identity=4184 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4207e5690d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identity=4184 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4207e5690d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=30 identity=4184 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4207e5690d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=30 identity=4184 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.146 910fbc2b-8849-4b8d-be2f-0b464bde0116 default }" containerID=d706d8e0b6f2c6ccc48d11d216db03a6d89c4cee381d4549ffb58df44a04f090 datapathConfiguration="&{false false false false false }" interface=lxcef0cd183c41a k8sPodName=openstack/ceph-object-controller-detect-version-vkxrh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d706d8e0b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=952 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vkxrh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d706d8e0b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=952 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=17967079-4f3b-4ea2-954f-93771bf36d2d,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=17967079-4f3b-4ea2-954f-93771bf36d2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vkxrh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=17967079-4f3b-4ea2-954f-93771bf36d2d;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=17967079-4f3b-4ea2-954f-93771bf36d2d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d706d8e0b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=952 identity=55830 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=17967079-4f3b-4ea2-954f-93771bf36d2d,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=17967079-4f3b-4ea2-954f-93771bf36d2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vkxrh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d706d8e0b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=952 identity=55830 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vkxrh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d706d8e0b6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=952 identity=55830 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vkxrh subsys=endpoint level=info msg="Successful endpoint creation" containerID=d706d8e0b6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=952 identity=55830 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vkxrh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d706d8e0b6 endpointID=952 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-vkxrh subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=17967079-4f3b-4ea2-954f-93771bf36d2d k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=17967079-4f3b-4ea2-954f-93771bf36d2d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=d706d8e0b6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=952 identity=55830 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vkxrh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 5ebd2aaf-c526-4db8-8009-d5b033951e0e default }" containerID=c515c1dfef9f6af6fe4652b229398e8c0babd6f58a74f6a4b4efd50e1b5d08a3 datapathConfiguration="&{false false false false false }" interface=lxc3a9e17c67043 k8sPodName=openstack/glance-db-init-9qf4j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c515c1dfef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-init-9qf4j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c515c1dfef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b003a317-b344-4cf9-a891-4c74551c48c1,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=b003a317-b344-4cf9-a891-4c74551c48c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-init-9qf4j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b003a317-b344-4cf9-a891-4c74551c48c1;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=b003a317-b344-4cf9-a891-4c74551c48c1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c515c1dfef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identity=28833 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b003a317-b344-4cf9-a891-4c74551c48c1,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=b003a317-b344-4cf9-a891-4c74551c48c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-init-9qf4j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c515c1dfef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identity=28833 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-init-9qf4j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c515c1dfef datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1188 identity=28833 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-init-9qf4j subsys=endpoint level=info msg="Successful endpoint creation" containerID=c515c1dfef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1188 identity=28833 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-init-9qf4j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c515c1dfef endpointID=1188 k8sNamespace=openstack k8sPodName=glance-db-init-9qf4j subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b003a317-b344-4cf9-a891-4c74551c48c1 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=b003a317-b344-4cf9-a891-4c74551c48c1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c515c1dfef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1188 identity=28833 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-init-9qf4j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 72d0b30a-0a84-4487-ab58-206403971ea1 default }" containerID=edba34a572196bc83c5138ab24ddcdee8569760112d44616d1ed7937d71a045a datapathConfiguration="&{false false false false false }" interface=lxcba8b3c8a5c58 k8sPodName=openstack/glance-db-sync-7647v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edba34a572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-db-sync-7647v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edba34a572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=51592563-47b9-47d1-b01e-6ecae369dcf0,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=51592563-47b9-47d1-b01e-6ecae369dcf0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-db-sync-7647v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=51592563-47b9-47d1-b01e-6ecae369dcf0;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=51592563-47b9-47d1-b01e-6ecae369dcf0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edba34a572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=1634 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=51592563-47b9-47d1-b01e-6ecae369dcf0,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=51592563-47b9-47d1-b01e-6ecae369dcf0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-db-sync-7647v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edba34a572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=1634 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-db-sync-7647v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=edba34a572 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=576 identity=1634 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-db-sync-7647v subsys=endpoint level=info msg="Successful endpoint creation" containerID=edba34a572 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=576 identity=1634 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-db-sync-7647v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=edba34a572 endpointID=576 k8sNamespace=openstack k8sPodName=glance-db-sync-7647v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=51592563-47b9-47d1-b01e-6ecae369dcf0 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=51592563-47b9-47d1-b01e-6ecae369dcf0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=edba34a572 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=576 identity=1634 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/glance-db-sync-7647v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 bd66b133-134b-4176-a9f0-bc91a06592f6 default }" containerID=df9164058fefefd8abda3dc284f874a47a7a12e4c321f709929a2d441f37c1c4 datapathConfiguration="&{false false false false false }" interface=lxcf85428290942 k8sPodName=openstack/glance-rabbit-init-vlz79 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df9164058f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-rabbit-init-vlz79 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df9164058f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9eab23a8-7317-44d8-b6ff-1d75de4f684d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9eab23a8-7317-44d8-b6ff-1d75de4f684d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-rabbit-init-vlz79 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9eab23a8-7317-44d8-b6ff-1d75de4f684d;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=9eab23a8-7317-44d8-b6ff-1d75de4f684d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df9164058f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 identity=9696 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9eab23a8-7317-44d8-b6ff-1d75de4f684d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9eab23a8-7317-44d8-b6ff-1d75de4f684d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-rabbit-init-vlz79 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df9164058f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 identity=9696 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-rabbit-init-vlz79 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=df9164058f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=978 identity=9696 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-rabbit-init-vlz79 subsys=endpoint level=info msg="Successful endpoint creation" containerID=df9164058f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=978 identity=9696 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-rabbit-init-vlz79 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df9164058f endpointID=978 k8sNamespace=openstack k8sPodName=glance-rabbit-init-vlz79 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9eab23a8-7317-44d8-b6ff-1d75de4f684d k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=9eab23a8-7317-44d8-b6ff-1d75de4f684d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=df9164058f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=978 identity=9696 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-rabbit-init-vlz79 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 927637b3-fd76-45af-a4be-e9866faf5e2f default }" containerID=5f48658aa054694be4822d73e06d62ff77390b64824c4e2fd92dbfbf68bc785d datapathConfiguration="&{false false false false false }" interface=lxc318b0267a05c k8sPodName=openstack/glance-ks-service-jrl2f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f48658aa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-service-jrl2f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f48658aa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2f312251-4003-4061-a4e0-ac3f7dd8b342,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=2f312251-4003-4061-a4e0-ac3f7dd8b342,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-service-jrl2f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5f48658aa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-service-jrl2f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2f312251-4003-4061-a4e0-ac3f7dd8b342;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=2f312251-4003-4061-a4e0-ac3f7dd8b342;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f48658aa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 identity=11784 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2f312251-4003-4061-a4e0-ac3f7dd8b342,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=2f312251-4003-4061-a4e0-ac3f7dd8b342,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-service-jrl2f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f48658aa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 identity=11784 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-service-jrl2f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f48658aa0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3318 identity=11784 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-service-jrl2f subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f48658aa0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3318 identity=11784 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-service-jrl2f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5f48658aa0 endpointID=3318 k8sNamespace=openstack k8sPodName=glance-ks-service-jrl2f subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2f312251-4003-4061-a4e0-ac3f7dd8b342 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=2f312251-4003-4061-a4e0-ac3f7dd8b342 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5f48658aa0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3318 identity=11784 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-service-jrl2f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 1b1f13f2-cf62-4731-83d3-f1e8d6ea39bc default }" containerID=aedb50ef7a2fd5d4a62af1810ef56e6ae495438cf20d53ca6c0d07dde1a8e4c6 datapathConfiguration="&{false false false false false }" interface=lxcb6c31f827d10 k8sPodName=openstack/glance-ks-endpoints-jdkf9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aedb50ef7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-ks-endpoints-jdkf9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aedb50ef7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3e165415-daed-4663-b61b-5d365f22fd9c,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3e165415-daed-4663-b61b-5d365f22fd9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-ks-endpoints-jdkf9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3e165415-daed-4663-b61b-5d365f22fd9c;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3e165415-daed-4663-b61b-5d365f22fd9c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aedb50ef7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 identity=42299 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3e165415-daed-4663-b61b-5d365f22fd9c,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3e165415-daed-4663-b61b-5d365f22fd9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-ks-endpoints-jdkf9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aedb50ef7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 identity=42299 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-ks-endpoints-jdkf9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aedb50ef7a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3947 identity=42299 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-ks-endpoints-jdkf9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aedb50ef7a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3947 identity=42299 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-ks-endpoints-jdkf9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aedb50ef7a endpointID=3947 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-jdkf9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3e165415-daed-4663-b61b-5d365f22fd9c k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3e165415-daed-4663-b61b-5d365f22fd9c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=aedb50ef7a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3947 identity=42299 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-ks-endpoints-jdkf9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 1ae8840f-fbdc-4270-80cb-fcb941d3cefd default }" containerID=06214e7cbc5ed7e0e19a1936ee63660e9fd1815f818dc729f0bcd4c3ccd24ae0 datapathConfiguration="&{false false false false false }" interface=lxc9c28dd5015dc k8sPodName=openstack/glance-ks-user-5b64g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06214e7cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-user-5b64g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06214e7cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ac6b0c7b-c39e-46c5-b88d-3465e0a298f7,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=ac6b0c7b-c39e-46c5-b88d-3465e0a298f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-user-5b64g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ac6b0c7b-c39e-46c5-b88d-3465e0a298f7;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=ac6b0c7b-c39e-46c5-b88d-3465e0a298f7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06214e7cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 identity=4775 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ac6b0c7b-c39e-46c5-b88d-3465e0a298f7,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=ac6b0c7b-c39e-46c5-b88d-3465e0a298f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-user-5b64g oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=06214e7cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 identity=4775 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-user-5b64g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06214e7cbc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=343 identity=4775 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-user-5b64g subsys=endpoint level=info msg="Successful endpoint creation" containerID=06214e7cbc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=343 identity=4775 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-user-5b64g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.49 e89102ca-1cbf-4aaf-9ec0-b035486566fe default }" containerID=72b04049a4e726bd6fb6ac643fd535852849b047fb9eb7697cf5442e46f3d976 datapathConfiguration="&{false false false false false }" interface=lxc8e391bb39462 k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-cnlt8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72b04049a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-cnlt8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72b04049a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-cnlt8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=72b04049a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identity=51511 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-cnlt8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72b04049a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identity=51511 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-cnlt8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 74f254ce-350b-4bdd-b89d-5f313c4ebc2a default }" containerID=d66cccdb586f1d984a2773f83a6f646d163f6019f5e8b7be2de158dc5f313d93 datapathConfiguration="&{false false false false false }" interface=lxcbc05c484d290 k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-nzb2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d66cccdb58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1977 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-nzb2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d66cccdb58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1977 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-nzb2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook-version=v1.10.10;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d66cccdb58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1977 identity=28159 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-nzb2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d66cccdb58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1977 identity=28159 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-nzb2c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72b04049a4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=197 identity=51511 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-cnlt8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=72b04049a4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=197 identity=51511 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-cnlt8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d66cccdb58 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1977 identity=28159 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-nzb2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=d66cccdb58 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1977 identity=28159 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-nzb2c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=06214e7cbc endpointID=343 k8sNamespace=openstack k8sPodName=glance-ks-user-5b64g subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ac6b0c7b-c39e-46c5-b88d-3465e0a298f7 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=ac6b0c7b-c39e-46c5-b88d-3465e0a298f7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=06214e7cbc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=343 identity=4775 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-user-5b64g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 b392f801-c47a-4549-bd89-a35b41d86dea default }" containerID=54a3942b7be446d73d43d2e292fd8ea2adc3ce195536de386b16b7915f12eaa1 datapathConfiguration="&{false false false false false }" interface=lxcd210f75bcf49 k8sPodName=openstack/glance-metadefs-load-l6nzv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54a3942b7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-metadefs-load-l6nzv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54a3942b7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a503e73b-0cb2-42ec-aa82-e25328ee8499,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a503e73b-0cb2-42ec-aa82-e25328ee8499,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-metadefs-load-l6nzv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a503e73b-0cb2-42ec-aa82-e25328ee8499;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=a503e73b-0cb2-42ec-aa82-e25328ee8499;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54a3942b7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=40935 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a503e73b-0cb2-42ec-aa82-e25328ee8499,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a503e73b-0cb2-42ec-aa82-e25328ee8499,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-metadefs-load-l6nzv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54a3942b7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=40935 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-metadefs-load-l6nzv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=54a3942b7b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=124 identity=40935 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-metadefs-load-l6nzv subsys=endpoint level=info msg="Successful endpoint creation" containerID=54a3942b7b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=124 identity=40935 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-metadefs-load-l6nzv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=54a3942b7b endpointID=124 k8sNamespace=openstack k8sPodName=glance-metadefs-load-l6nzv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a503e73b-0cb2-42ec-aa82-e25328ee8499 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=a503e73b-0cb2-42ec-aa82-e25328ee8499 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=54a3942b7b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=124 identity=40935 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-metadefs-load-l6nzv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 1fbe6cad-f8c2-4f44-b695-048a4ee76e68 default }" containerID=ea90d62ed5122d02f9e61274fb589c7e8518f2a98d9ed570f11ee7144f47b874 datapathConfiguration="&{false false false false false }" interface=lxcf634e15c3449 k8sPodName=openstack/glance-storage-init-fwcps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea90d62ed5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-storage-init-fwcps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea90d62ed5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5f1ca197-6edd-4afc-aa63-b7e596ecafb2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=5f1ca197-6edd-4afc-aa63-b7e596ecafb2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-storage-init-fwcps subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5f1ca197-6edd-4afc-aa63-b7e596ecafb2;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=5f1ca197-6edd-4afc-aa63-b7e596ecafb2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea90d62ed5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identity=17479 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5f1ca197-6edd-4afc-aa63-b7e596ecafb2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=5f1ca197-6edd-4afc-aa63-b7e596ecafb2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-storage-init-fwcps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea90d62ed5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identity=17479 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-storage-init-fwcps subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea90d62ed5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=554 identity=17479 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-storage-init-fwcps subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea90d62ed5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=554 identity=17479 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-storage-init-fwcps subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ea90d62ed5 endpointID=554 k8sNamespace=openstack k8sPodName=glance-storage-init-fwcps subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5f1ca197-6edd-4afc-aa63-b7e596ecafb2 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=5f1ca197-6edd-4afc-aa63-b7e596ecafb2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ea90d62ed5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=554 identity=17479 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-storage-init-fwcps subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 6d11fc9f-2e95-441b-be79-4fe444a8d87a default }" containerID=affe27f12d62e8933141cc3a49e4598006a9154d862d31ac3299f150d5b7cbf9 datapathConfiguration="&{false false false false false }" interface=lxc25c94b8bf712 k8sPodName=openstack/glance-api-5fd9bc5bd8-cdvbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=affe27f12d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3946 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-api-5fd9bc5bd8-cdvbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=affe27f12d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3946 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-api-5fd9bc5bd8-cdvbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=affe27f12d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3946 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-api-5fd9bc5bd8-cdvbm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=affe27f12d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3946 identity=46302 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-api-5fd9bc5bd8-cdvbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=affe27f12d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3946 identity=46302 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-api-5fd9bc5bd8-cdvbm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=affe27f12d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3946 identity=46302 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-api-5fd9bc5bd8-cdvbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=affe27f12d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3946 identity=46302 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-api-5fd9bc5bd8-cdvbm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.63 2d0f524e-6716-49ef-93d4-f8e1e67c5bf4 default }" containerID=303000cb78f199d9556bff5e29e1bfb391206046256070cf41f7f26960424b5b datapathConfiguration="&{false false false false false }" interface=lxcdc4831fbc7d1 k8sPodName=openstack/staffeln-conductor-587f97699c-nbs9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=303000cb78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-conductor-587f97699c-nbs9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=303000cb78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-conductor-587f97699c-nbs9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=303000cb78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-conductor-587f97699c-nbs9s line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=303000cb78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 identity=62468 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-conductor-587f97699c-nbs9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=303000cb78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 identity=62468 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-conductor-587f97699c-nbs9s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 6abf2062-7666-4d94-b6cc-44f31ac01161 default }" containerID=5b101e35cae61695af055c22211e51d47b1c0fe66c204e90cf0604041121bc2f datapathConfiguration="&{false false false false false }" interface=lxc95228c3b8156 k8sPodName=openstack/staffeln-db-init-zq2h5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b101e35ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-db-init-zq2h5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b101e35ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=80fb103a-2179-407c-aa3b-1be59bb370db,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=80fb103a-2179-407c-aa3b-1be59bb370db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-db-init-zq2h5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=80fb103a-2179-407c-aa3b-1be59bb370db;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=80fb103a-2179-407c-aa3b-1be59bb370db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b101e35ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identity=57140 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=80fb103a-2179-407c-aa3b-1be59bb370db,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=80fb103a-2179-407c-aa3b-1be59bb370db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-db-init-zq2h5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b101e35ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identity=57140 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-db-init-zq2h5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=303000cb78 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2406 identity=62468 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-conductor-587f97699c-nbs9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=303000cb78 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2406 identity=62468 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-conductor-587f97699c-nbs9s subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.21 376e6944-d841-404d-b3a4-7b5f172531aa default }" containerID=51c97f1e60c7d35213268acdb47cdfcba578f51afb747765a518483d8f3d2231 datapathConfiguration="&{false false false false false }" interface=lxcccb1f8c4bbe8 k8sPodName=openstack/staffeln-api-8465c95694-4lj2w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51c97f1e60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-api-8465c95694-4lj2w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51c97f1e60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-api-8465c95694-4lj2w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51c97f1e60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identity=11637 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-api-8465c95694-4lj2w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51c97f1e60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identity=11637 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-api-8465c95694-4lj2w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b101e35ca datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=503 identity=57140 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-db-init-zq2h5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b101e35ca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=503 identity=57140 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-db-init-zq2h5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=51c97f1e60 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1082 identity=11637 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-api-8465c95694-4lj2w subsys=endpoint level=info msg="Successful endpoint creation" containerID=51c97f1e60 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1082 identity=11637 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-api-8465c95694-4lj2w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5b101e35ca endpointID=503 k8sNamespace=openstack k8sPodName=staffeln-db-init-zq2h5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=80fb103a-2179-407c-aa3b-1be59bb370db k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=80fb103a-2179-407c-aa3b-1be59bb370db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=5b101e35ca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=503 identity=57140 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-db-init-zq2h5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 39635e05-00ae-4c1c-b693-62fd9a222ed8 default }" containerID=4a87803b9718254a3f696fd28e836642d73a39ea916101c08a53be3bdc021aa5 datapathConfiguration="&{false false false false false }" interface=lxc3ec07804e204 k8sPodName=openstack/staffeln-db-sync-cq8x7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a87803b97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-db-sync-cq8x7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a87803b97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d31b33f8-2e16-4430-b17f-6838bb81404f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=d31b33f8-2e16-4430-b17f-6838bb81404f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-db-sync-cq8x7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4a87803b97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-db-sync-cq8x7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=d31b33f8-2e16-4430-b17f-6838bb81404f;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=d31b33f8-2e16-4430-b17f-6838bb81404f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a87803b97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=453 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d31b33f8-2e16-4430-b17f-6838bb81404f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=d31b33f8-2e16-4430-b17f-6838bb81404f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-db-sync-cq8x7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a87803b97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=453 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-db-sync-cq8x7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a87803b97 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=491 identity=453 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-db-sync-cq8x7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a87803b97 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=491 identity=453 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/staffeln-db-sync-cq8x7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager