level=info msg="Memory available for map entries (0.003% of 16764960768B): 41912401B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="791.109µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="42.691µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="825.46µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.49µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=98.217945ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.911µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="20.38µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="56.421µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="64.971µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="67.101µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="378.024µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.65µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.532701ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.199425ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="44.55µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="46.76µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="235.133µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="92.391µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="67.031µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=40.989016ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="127.412µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.48µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="9.55µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.83.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.386835ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="2.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.862761ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.167683ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.89µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="43.23µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="25.14µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="38.401µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="90.101µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="817.97µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.64µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="243.753µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="370.254µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="874.981µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.52µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="15.34µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.83 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.83 ipAddr.ipv6="" k8sNodeIP=199.19.213.83 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.83" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.51" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.83" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.83} {CiliumInternalIP 10.0.0.51}] 10.0.0.0/24 [] [] 10.0.0.70 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:41609" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.720940862s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="107.071µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="8.01µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="39.77µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.45µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2989 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2989 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2989 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.6445771s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=309.780107ms file-path=/var/run/cilium/state/templates/7ab98a2c69cbaa1e852f7f8b429c9492d2c48012018d4705cdf021cdff183eb9/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2989 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 0f4734d2-e55d-485f-b5bd-21714641c731 default }" containerID=4588da24276f5680f171cd2f00e21678d1732fd393562ea261894ea885ce97aa datapathConfiguration="&{false false false false false }" interface=lxcab70e1c3f15b k8sPodName=kube-system/coredns-7c96b6546b-gkvr2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4588da2427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gkvr2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 6768c90b-be76-4a89-9e04-afa7a5dddcea default }" containerID=3de359a1fb3ad4ede994742f1aff985e7d943f860b4adf0b41c9fbe66567b925 datapathConfiguration="&{false false false false false }" interface=lxc8a999e0d3dc2 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x7mrk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3de359a1fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3052 ipv4=10.0.0.35 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x7mrk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4588da2427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gkvr2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=3de359a1fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3052 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b7c83c07-f446-4e6d-94ba-8078f70914b4,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b7c83c07-f446-4e6d-94ba-8078f70914b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.35 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x7mrk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3de359a1fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3052 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x7mrk line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=4588da2427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gkvr2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4588da2427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identity=49590 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gkvr2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4588da2427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identity=49590 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gkvr2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=b7c83c07-f446-4e6d-94ba-8078f70914b4;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=b7c83c07-f446-4e6d-94ba-8078f70914b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3de359a1fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3052 identity=44982 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b7c83c07-f446-4e6d-94ba-8078f70914b4,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b7c83c07-f446-4e6d-94ba-8078f70914b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.35 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x7mrk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3de359a1fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3052 identity=44982 ipv4=10.0.0.35 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x7mrk subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 ipv4=10.0.0.70 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identityLabels="reserved:health" ipv4=10.0.0.70 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identity=4 identityLabels="reserved:health" ipv4=10.0.0.70 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.069719556s file-path=/var/run/cilium/state/templates/fb5d45ca7e9cb2a772edf22222dfd40bf5a22bcb88e0676ed0861ee4653df279/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=3de359a1fb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3052 identity=44982 ipv4=10.0.0.35 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x7mrk subsys=endpoint level=info msg="Successful endpoint creation" containerID=3de359a1fb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3052 identity=44982 ipv4=10.0.0.35 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x7mrk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4588da2427 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=148 identity=49590 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gkvr2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4588da2427 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=148 identity=49590 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gkvr2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1378 identity=4 ipv4=10.0.0.70 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3de359a1fb endpointID=3052 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-x7mrk subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=b7c83c07-f446-4e6d-94ba-8078f70914b4 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=b7c83c07-f446-4e6d-94ba-8078f70914b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=3de359a1fb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3052 identity=44982 ipv4=10.0.0.35 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x7mrk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 140364b4-521e-4f29-a725-83d2f8a91194 default }" containerID=dcd8ee6935a9417ea7d722c08b585959b727f12926e2c4c5ae352e0347406c9d datapathConfiguration="&{false false false false false }" interface=lxc1add0276d850 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5cbd8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dcd8ee6935 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5cbd8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dcd8ee6935 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5cbd8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dcd8ee6935 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 identity=19561 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5cbd8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dcd8ee6935 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 identity=19561 ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5cbd8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dcd8ee6935 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2772 identity=19561 ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5cbd8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dcd8ee6935 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2772 identity=19561 ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5cbd8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2989 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02989 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02989 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02989 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02989:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2989 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 2f4abf2d-b447-4ad1-829c-8df5abb5ca85 default }" containerID=cce20bc4204cdba9a788739f4237bcf02b9070baf4b25e413018e5c4aa762e48 datapathConfiguration="&{false false false false false }" interface=lxcd060873108a6 k8sPodName=kube-system/coredns-67659f764b-rl9g5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cce20bc420 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3635 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-67659f764b-rl9g5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cce20bc420 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3635 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-67659f764b-rl9g5 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cce20bc420 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3635 identity=49590 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-67659f764b-rl9g5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cce20bc420 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3635 identity=49590 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-67659f764b-rl9g5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 4126d159-aa12-47ee-8ca7-142d2db8a204 default }" containerID=4ced174245709a8e5274c3f645e1811e7c7064354ce85b245b857f2631a00f4b datapathConfiguration="&{false false false false false }" interface=lxcbccb0480ea08 k8sPodName=kube-system/coredns-67659f764b-mlvnl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ced174245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-mlvnl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ced174245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-mlvnl subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4ced174245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 identity=49590 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-mlvnl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ced174245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 identity=49590 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-mlvnl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cce20bc420 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3635 identity=49590 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-67659f764b-rl9g5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cce20bc420 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3635 identity=49590 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-67659f764b-rl9g5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4ced174245 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1174 identity=49590 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-mlvnl subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ced174245 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1174 identity=49590 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-mlvnl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.196 682ad320-5dab-4089-8ae7-754112ae5c66 default }" containerID=e9b13ec47b395466f6a37bb7700775f4287e3511b6162f1b43970a85b2ac3933 datapathConfiguration="&{false false false false false }" interface=lxc4dab6ec3bf12 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-62mfn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9b13ec47b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-62mfn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9b13ec47b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-62mfn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e9b13ec47b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-62mfn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9b13ec47b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=50859 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-62mfn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9b13ec47b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=50859 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-62mfn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9b13ec47b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=500 identity=50859 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-62mfn subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9b13ec47b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=500 identity=50859 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-62mfn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4588da2427 endpointID=148 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-gkvr2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=4588da2427 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=148 identity=49590 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gkvr2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 e7736fa0-cba2-4f69-be8a-0d8319787fc9 default }" containerID=5e3c20b1d0182347264dad9b2d825539a49afa472464d6de2f983e9298109519 datapathConfiguration="&{false false false false false }" interface=lxc5c36b930b87a k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-297rk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e3c20b1d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 ipv4=10.0.0.216 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-297rk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e3c20b1d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.216 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-297rk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.93 38a4b51d-e1b4-4bdc-8d55-bb2c74a3171a default }" containerID=1dad6b617db73e0af5238eeaed383922ea169e99fc231d55f2ee1a3ac3924019 datapathConfiguration="&{false false false false false }" interface=lxcea4683e86c36 k8sPodName=cert-manager/cert-manager-79c48d47db-hmp79 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dad6b617d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-hmp79 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dad6b617d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-hmp79 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1dad6b617d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-hmp79 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=5e3c20b1d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-297rk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e3c20b1d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 identity=54378 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.216 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-297rk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e3c20b1d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 identity=54378 ipv4=10.0.0.216 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-297rk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1dad6b617d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identity=4777 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-hmp79 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dad6b617d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identity=4777 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-hmp79 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 b4d5ecd8-d03c-4d32-9c08-ca93d7951568 default }" containerID=e336633f0aab9735c6613b18522c8b89c5fb26452ca5872bffa1f3f4ff9b9fd9 datapathConfiguration="&{false false false false false }" interface=lxcefd3c443dd7d k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-dhbf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e336633f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-dhbf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e336633f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-dhbf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e336633f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identity=1127 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-dhbf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e336633f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identity=1127 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-dhbf7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1dad6b617d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=779 identity=4777 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-hmp79 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dad6b617d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=779 identity=4777 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-hmp79 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5e3c20b1d0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3615 identity=54378 ipv4=10.0.0.216 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-297rk subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e3c20b1d0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3615 identity=54378 ipv4=10.0.0.216 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-297rk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e336633f0a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4092 identity=1127 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-dhbf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e336633f0a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4092 identity=1127 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-dhbf7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.100 7c5ae054-389d-4222-b524-1a0bd83c8063 default }" containerID=f0f9654d78bdcb712c33d376fe5eecf8e13ff0a34884f51a9a744bc529785446 datapathConfiguration="&{false false false false false }" interface=lxc246d48322d4e k8sPodName=cert-manager/cert-manager-startupapicheck-rlcnx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0f9654d78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 ipv4=10.0.0.100 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rlcnx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0f9654d78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=aaa3e157-c5b3-4b1c-bee9-795c8dee8c5e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=aaa3e157-c5b3-4b1c-bee9-795c8dee8c5e,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.100 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rlcnx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.15.5;k8s:batch.kubernetes.io/controller-uid=aaa3e157-c5b3-4b1c-bee9-795c8dee8c5e;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=aaa3e157-c5b3-4b1c-bee9-795c8dee8c5e;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0f9654d78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 identity=22428 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=aaa3e157-c5b3-4b1c-bee9-795c8dee8c5e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=aaa3e157-c5b3-4b1c-bee9-795c8dee8c5e,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.100 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rlcnx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0f9654d78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 identity=22428 ipv4=10.0.0.100 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rlcnx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0f9654d78 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1114 identity=22428 ipv4=10.0.0.100 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rlcnx subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0f9654d78 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1114 identity=22428 ipv4=10.0.0.100 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rlcnx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f0f9654d78 endpointID=1114 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-rlcnx subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.15.5 k8s:batch.kubernetes.io/controller-uid=aaa3e157-c5b3-4b1c-bee9-795c8dee8c5e k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=aaa3e157-c5b3-4b1c-bee9-795c8dee8c5e k8s:helm.sh/chart=cert-manager-v1.15.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=f0f9654d78 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1114 identity=22428 ipv4=10.0.0.100 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rlcnx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 b63fea55-f82c-4428-8561-d7d0d32eb64d default }" containerID=d1aece4f7d8ebd2246ad6a4a47593162d903af6b9768334eed05c746cacfa086 datapathConfiguration="&{false false false false false }" interface=lxc72df58ecf6fb k8sPodName=ingress-nginx/ingress-nginx-admission-create-qdlmd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1aece4f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3509 ipv4=10.0.0.160 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qdlmd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1aece4f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3509 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5e116eba-2ad2-42f2-87bb-776e5772dd77,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=5e116eba-2ad2-42f2-87bb-776e5772dd77,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.160 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qdlmd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d1aece4f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3509 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.160 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qdlmd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=5e116eba-2ad2-42f2-87bb-776e5772dd77;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=5e116eba-2ad2-42f2-87bb-776e5772dd77;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1aece4f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3509 identity=21310 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5e116eba-2ad2-42f2-87bb-776e5772dd77,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=5e116eba-2ad2-42f2-87bb-776e5772dd77,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.160 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qdlmd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1aece4f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3509 identity=21310 ipv4=10.0.0.160 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qdlmd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1aece4f7d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3509 identity=21310 ipv4=10.0.0.160 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qdlmd subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1aece4f7d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3509 identity=21310 ipv4=10.0.0.160 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qdlmd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d1aece4f7d endpointID=3509 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-qdlmd subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=5e116eba-2ad2-42f2-87bb-776e5772dd77 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=5e116eba-2ad2-42f2-87bb-776e5772dd77 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=d1aece4f7d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3509 identity=21310 ipv4=10.0.0.160 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qdlmd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 437226e7-f526-46c8-8665-392208328ef9 default }" containerID=031b29e3699e4255c90b03a5d2e443dcd7251e5309269225ae8fea3b93e44788 datapathConfiguration="&{false false false false false }" interface=lxc6dcfcfe69245 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jhg7m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=031b29e369 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jhg7m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=031b29e369 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jhg7m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=031b29e369 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jhg7m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=031b29e369 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 identity=4302 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jhg7m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=031b29e369 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 identity=4302 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jhg7m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=031b29e369 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=577 identity=4302 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jhg7m subsys=endpoint level=info msg="Successful endpoint creation" containerID=031b29e369 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=577 identity=4302 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jhg7m subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.47 d1d75e05-3c73-472a-962f-606cb5285dcd default }" containerID=96835b04593af9315653328dec9b9acc04cf9e92d0cd0e4069d325c6f8704050 datapathConfiguration="&{false false false false false }" interface=lxcb49b13a7435d k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9knl2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96835b0459 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9knl2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96835b0459 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a43b21d9-b082-4d19-a2e1-964865b24cb0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=a43b21d9-b082-4d19-a2e1-964865b24cb0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9knl2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=a43b21d9-b082-4d19-a2e1-964865b24cb0;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=a43b21d9-b082-4d19-a2e1-964865b24cb0;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96835b0459 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identity=29032 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a43b21d9-b082-4d19-a2e1-964865b24cb0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=a43b21d9-b082-4d19-a2e1-964865b24cb0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9knl2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96835b0459 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identity=29032 ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9knl2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96835b0459 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=890 identity=29032 ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9knl2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=96835b0459 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=890 identity=29032 ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9knl2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=96835b0459 endpointID=890 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-9knl2 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=a43b21d9-b082-4d19-a2e1-964865b24cb0 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=a43b21d9-b082-4d19-a2e1-964865b24cb0 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=96835b0459 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=890 identity=29032 ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9knl2 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6cbcd211-e61e-4880-b160-064e7e0f1dc3] Description:}]" policyAddRequest=e51797a5-32e1-48fd-9532-470758988c93 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e51797a5-32e1-48fd-9532-470758988c93 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f1a4d9ac-52a9-4538-b06a-72403d5e101e] Description:}]" policyAddRequest=302f20d4-bc37-41a2-9226-b825f9e9fae8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=302f20d4-bc37-41a2-9226-b825f9e9fae8 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.208 32738328-f1f9-4af0-be7c-96efaa69e017 default }" containerID=42bf5bad011216427b7d8f998f72469f50df2e854853527efa44c2f557e4caa2 datapathConfiguration="&{false false false false false }" interface=lxce27a59347f83 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-l7hxg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42bf5bad01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-l7hxg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42bf5bad01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-l7hxg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=42bf5bad01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-l7hxg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=42bf5bad01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 identity=29961 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-l7hxg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42bf5bad01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 identity=29961 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-l7hxg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42bf5bad01 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2504 identity=29961 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-l7hxg subsys=endpoint level=info msg="Successful endpoint creation" containerID=42bf5bad01 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2504 identity=29961 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-l7hxg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.224 e6dc501f-7222-4b01-86d5-fc4b11e26713 default }" containerID=86fae3114c84786029462dc96d7fd3ba06d5e62f683184af171685eff7561c8f datapathConfiguration="&{false false false false false }" interface=lxcbc1ffb3b97dd k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-29f7n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86fae3114c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-29f7n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86fae3114c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-29f7n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86fae3114c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 identity=6816 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-29f7n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86fae3114c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 identity=6816 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-29f7n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86fae3114c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3274 identity=6816 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-29f7n subsys=endpoint level=info msg="Successful endpoint creation" containerID=86fae3114c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3274 identity=6816 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-29f7n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.179 83deaffd-c30d-4923-b4dd-a4c1b8f525c9 default }" containerID=06483a60b0091b2cee1e39c09093c681afaf0c3b007b07f47e649176c2a89423 datapathConfiguration="&{false false false false false }" interface=lxc34d188b2ca5d k8sPodName=openstack/pxc-operator-69cb5bbdb9-n82r6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06483a60b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-n82r6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06483a60b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-n82r6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06483a60b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 identity=42188 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-n82r6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=06483a60b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 identity=42188 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-n82r6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06483a60b0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2055 identity=42188 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-n82r6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=06483a60b0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2055 identity=42188 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-n82r6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.95 254ab3f6-944c-429a-a2e2-d2a734a2b6a5 default }" containerID=60dca83c4afbd90c27db7718f857e0f0b9b2562102ad2cd12e16ca391319f9e8 datapathConfiguration="&{false false false false false }" interface=lxc30458cf7d42c k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60dca83c4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60dca83c4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=60dca83c4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identity=30726 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60dca83c4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identity=30726 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60dca83c4a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=902 identity=30726 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60dca83c4a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=902 identity=30726 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.223 86458cc4-141c-4a11-a951-a9b0073f41b0 default }" containerID=7facfe95cf43ed1ff93da391b99b80125b02c75fdc940002593914457e279fd0 datapathConfiguration="&{false false false false false }" interface=lxcbe51a18d7a98 k8sPodName=local-path-storage/helper-pod-create-pvc-6cf5724d-0034-4f2b-a8f1-2d7af28b6044 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7facfe95cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6cf5724d-0034-4f2b-a8f1-2d7af28b6044 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7facfe95cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6cf5724d-0034-4f2b-a8f1-2d7af28b6044 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7facfe95cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identity=7040 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6cf5724d-0034-4f2b-a8f1-2d7af28b6044 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7facfe95cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identity=7040 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6cf5724d-0034-4f2b-a8f1-2d7af28b6044 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7facfe95cf datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2449 identity=7040 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6cf5724d-0034-4f2b-a8f1-2d7af28b6044 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7facfe95cf datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2449 identity=7040 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6cf5724d-0034-4f2b-a8f1-2d7af28b6044 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7facfe95cf endpointID=2449 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6cf5724d-0034-4f2b-a8f1-2d7af28b6044 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7facfe95cf datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2449 identity=7040 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6cf5724d-0034-4f2b-a8f1-2d7af28b6044 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 1e6893b8-91bd-4648-9b47-6a096791e477 default }" containerID=0368c9a979be1b6076b754690541e7a6b6239803d4118886b21247b74e6aa855 datapathConfiguration="&{false false false false false }" interface=lxcb081ca509d4c k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0368c9a979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0368c9a979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0368c9a979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=22409 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0368c9a979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=22409 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0368c9a979 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=483 identity=22409 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0368c9a979 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=483 identity=22409 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 ce02153e-4a88-4654-905e-5c11103f1ca5 default }" containerID=d387a9e0c112382fa17471e37286e4a9231190d600df9102ba2b7007b6a71323 datapathConfiguration="&{false false false false false }" interface=lxc2f8a5e7ae722 k8sPodName=openstack/memcached-memcached-6479589586-6s9v6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d387a9e0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6s9v6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d387a9e0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6s9v6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d387a9e0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identity=36541 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6s9v6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d387a9e0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identity=36541 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6s9v6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d387a9e0c1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=368 identity=36541 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6s9v6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d387a9e0c1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=368 identity=36541 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6s9v6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=4e1fd52d-a55e-4439-9911-97061553f9b3] Description:}]" policyAddRequest=4c8728e5-0170-4fda-a0f8-b305c1b80262 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=4c8728e5-0170-4fda-a0f8-b305c1b80262 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.121 bb1bc548-e6d7-47eb-a29a-43211ca92108 default }" containerID=6d28529b98a89da134c2c64a7bc5ff4e2aa3923c0c5948515f9d2c523b6d21a4 datapathConfiguration="&{false false false false false }" interface=lxc420eb6043a4a k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d28529b98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1899 ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d28529b98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1899 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d28529b98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1899 identity=22505 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d28529b98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1899 identity=22505 ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6d28529b98 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1899 identity=22505 ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d28529b98 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1899 identity=22505 ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03232694138446893 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.78 8588784e-f8b8-4b10-947e-88d9f72f3ae4 default }" containerID=2d474d47e9ecf2325d9de4d42ead81a08669c30cd2a7e14d084d6467af31c0a0 datapathConfiguration="&{false false false false false }" interface=lxcd1ba1ccc314d k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-645fr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d474d47e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 ipv4=10.0.0.78 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-645fr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d474d47e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.78 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-645fr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2d474d47e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.78 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-645fr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d474d47e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 identity=40015 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.78 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-645fr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d474d47e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 identity=40015 ipv4=10.0.0.78 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-645fr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d474d47e9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2883 identity=40015 ipv4=10.0.0.78 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-645fr subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d474d47e9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2883 identity=40015 ipv4=10.0.0.78 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-645fr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.108 146a6bae-09b2-4b46-91a9-5c9de4a04289 default }" containerID=ade5f973b1001ec966d73f5549fbea4f47100080ad7dea016e8c15233ff71be0 datapathConfiguration="&{false false false false false }" interface=lxc5ea08e9715c9 k8sPodName=monitoring/kube-prometheus-stack-admission-create-7xkc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ade5f973b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7xkc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ade5f973b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=1e071c68-f43c-4912-be0f-d36356569349,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1e071c68-f43c-4912-be0f-d36356569349,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7xkc6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=1e071c68-f43c-4912-be0f-d36356569349;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=1e071c68-f43c-4912-be0f-d36356569349;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ade5f973b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identity=10643 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=1e071c68-f43c-4912-be0f-d36356569349,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1e071c68-f43c-4912-be0f-d36356569349,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7xkc6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ade5f973b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identity=10643 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7xkc6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ade5f973b1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4036 identity=10643 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7xkc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ade5f973b1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4036 identity=10643 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7xkc6 subsys=daemon level=info msg="Delete endpoint request" containerID=ade5f973b1 endpointID=4036 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-7xkc6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=1e071c68-f43c-4912-be0f-d36356569349 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=1e071c68-f43c-4912-be0f-d36356569349 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=ade5f973b1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4036 identity=10643 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7xkc6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 a748b5d5-8173-44d3-a1f8-1712a6e51c67 default }" containerID=aa1e30db007357e387601a1ef32c9ee4aefe5b5f4452bfbab1109c87f186415b datapathConfiguration="&{false false false false false }" interface=lxc1c97e55c01e0 k8sPodName=monitoring/kube-prometheus-stack-grafana-7c9c774844-pvsxz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa1e30db00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7c9c774844-pvsxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa1e30db00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7c9c774844-pvsxz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.23 da5f4083-4d18-4ea8-85e6-2f8b86fa5a74 default }" containerID=fec2f1c7d0d569a5fae5bc6d40479af717e27d56e615c61bebab73c9d538eb00 datapathConfiguration="&{false false false false false }" interface=lxc30c1f9aa51e7 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4fbvx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fec2f1c7d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4fbvx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 86aef447-655e-413d-a8a3-f6aa8103d9a4 default }" containerID=6ed24e8626844439ae8e1ab8ffdfc0bbb9c3f35b70d5416556520131e0145372 datapathConfiguration="&{false false false false false }" interface=lxc9e7a8c672cab k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x2nwt labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=fec2f1c7d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4fbvx subsys=endpoint level=info msg="New endpoint" containerID=6ed24e8626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1833 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x2nwt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ed24e8626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1833 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=9ba972bb-017a-4bd6-ac6d-1e5ace564935,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9ba972bb-017a-4bd6-ac6d-1e5ace564935,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x2nwt subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa1e30db00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identity=4509 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7c9c774844-pvsxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa1e30db00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identity=4509 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7c9c774844-pvsxz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=fec2f1c7d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4fbvx line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=6ed24e8626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1833 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x2nwt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fec2f1c7d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identity=24107 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4fbvx oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=fec2f1c7d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identity=24107 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4fbvx subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=9ba972bb-017a-4bd6-ac6d-1e5ace564935;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=9ba972bb-017a-4bd6-ac6d-1e5ace564935;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ed24e8626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1833 identity=31732 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=9ba972bb-017a-4bd6-ac6d-1e5ace564935,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9ba972bb-017a-4bd6-ac6d-1e5ace564935,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x2nwt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ed24e8626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1833 identity=31732 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x2nwt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 24e26cd7-1486-4680-ac60-c77a906d488f default }" containerID=b4112824334c1ddf9534a86010d1f7bbf058348cf1a082d5cf4b086a6a662257 datapathConfiguration="&{false false false false false }" interface=lxc243abc680b94 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-whnhh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b411282433 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4068 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-whnhh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b411282433 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4068 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-whnhh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b411282433 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4068 identity=49123 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-whnhh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b411282433 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4068 identity=49123 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-whnhh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa1e30db00 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1207 identity=4509 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7c9c774844-pvsxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa1e30db00 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1207 identity=4509 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7c9c774844-pvsxz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fec2f1c7d0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2186 identity=24107 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4fbvx subsys=endpoint level=info msg="Successful endpoint creation" containerID=fec2f1c7d0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2186 identity=24107 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4fbvx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b411282433 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4068 identity=49123 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-whnhh subsys=endpoint level=info msg="Successful endpoint creation" containerID=b411282433 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4068 identity=49123 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-whnhh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6ed24e8626 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1833 identity=31732 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x2nwt subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ed24e8626 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1833 identity=31732 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x2nwt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6ed24e8626 endpointID=1833 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-x2nwt subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=9ba972bb-017a-4bd6-ac6d-1e5ace564935 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=9ba972bb-017a-4bd6-ac6d-1e5ace564935 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6ed24e8626 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1833 identity=31732 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-x2nwt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 bd5e63a2-7b10-465c-accf-91c7ab4a1502 default }" containerID=cc2ae2ad0269ef29d94d74cce489ccb4a5db8b68c4a90861f309b317804cf902 datapathConfiguration="&{false false false false false }" interface=lxc1619065d4920 k8sPodName=local-path-storage/helper-pod-create-pvc-f845b1f9-1392-47bf-899c-d99602c7a114 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc2ae2ad02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=275 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f845b1f9-1392-47bf-899c-d99602c7a114 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc2ae2ad02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=275 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f845b1f9-1392-47bf-899c-d99602c7a114 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc2ae2ad02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=275 identity=7040 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f845b1f9-1392-47bf-899c-d99602c7a114 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc2ae2ad02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=275 identity=7040 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f845b1f9-1392-47bf-899c-d99602c7a114 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc2ae2ad02 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=275 identity=7040 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f845b1f9-1392-47bf-899c-d99602c7a114 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc2ae2ad02 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=275 identity=7040 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f845b1f9-1392-47bf-899c-d99602c7a114 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.53 48ce3305-f731-4a82-89a0-b498804d24ca default }" containerID=a424ab0d8542f158f11d5b15ac635a689d871ff4fe8b6dd8981af648153bd6db datapathConfiguration="&{false false false false false }" interface=lxc8b19f2268bb6 k8sPodName=local-path-storage/helper-pod-create-pvc-464837f1-75cd-4293-99ef-1739c60311cd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a424ab0d85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1480 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-464837f1-75cd-4293-99ef-1739c60311cd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a424ab0d85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1480 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-464837f1-75cd-4293-99ef-1739c60311cd subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a424ab0d85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1480 identity=7040 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-464837f1-75cd-4293-99ef-1739c60311cd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a424ab0d85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1480 identity=7040 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-464837f1-75cd-4293-99ef-1739c60311cd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a424ab0d85 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1480 identity=7040 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-464837f1-75cd-4293-99ef-1739c60311cd subsys=endpoint level=info msg="Successful endpoint creation" containerID=a424ab0d85 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1480 identity=7040 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-464837f1-75cd-4293-99ef-1739c60311cd subsys=daemon level=info msg="Delete endpoint request" containerID=cc2ae2ad02 endpointID=275 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f845b1f9-1392-47bf-899c-d99602c7a114 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cc2ae2ad02 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=275 identity=7040 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f845b1f9-1392-47bf-899c-d99602c7a114 subsys=endpoint level=info msg="Delete endpoint request" containerID=a424ab0d85 endpointID=1480 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-464837f1-75cd-4293-99ef-1739c60311cd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a424ab0d85 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1480 identity=7040 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-464837f1-75cd-4293-99ef-1739c60311cd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 e1e4601c-fb71-445b-b505-06b99c3a2523 default }" containerID=8dc81c0ad6686b410129eea61b3cd71a941b2d20c4a9e583a189482d8ba3de62 datapathConfiguration="&{false false false false false }" interface=lxc0031e7db152a k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8dc81c0ad6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1982 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8dc81c0ad6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1982 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8dc81c0ad6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1982 identity=41331 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8dc81c0ad6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1982 identity=41331 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8dc81c0ad6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1982 identity=41331 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8dc81c0ad6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1982 identity=41331 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.76 fb6d85e3-a333-491c-9129-d338b4fb6eff default }" containerID=5352c51fe035db85f8a11173e7c2036d9d3fdf3da4cd64e6ab0556c4af1ca71e datapathConfiguration="&{false false false false false }" interface=lxc6cd9dea4ab04 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5352c51fe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5352c51fe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=5352c51fe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5352c51fe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identity=20548 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5352c51fe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identity=20548 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5352c51fe0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1146 identity=20548 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5352c51fe0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1146 identity=20548 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.155 4ec26fdf-72ad-4593-b2f6-efbdf2ed03b7 default }" containerID=94a0bbfc3a5a2fb210baa29233fbe79ee3f4f366506ccb746a0766448cefc09b datapathConfiguration="&{false false false false false }" interface=lxc77ecf50a237e k8sPodName=local-path-storage/helper-pod-create-pvc-3d07b469-4d07-46fb-8f01-ec6c42ad27d8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94a0bbfc3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d07b469-4d07-46fb-8f01-ec6c42ad27d8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94a0bbfc3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d07b469-4d07-46fb-8f01-ec6c42ad27d8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94a0bbfc3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identity=7040 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d07b469-4d07-46fb-8f01-ec6c42ad27d8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94a0bbfc3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identity=7040 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d07b469-4d07-46fb-8f01-ec6c42ad27d8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94a0bbfc3a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3235 identity=7040 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d07b469-4d07-46fb-8f01-ec6c42ad27d8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=94a0bbfc3a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3235 identity=7040 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d07b469-4d07-46fb-8f01-ec6c42ad27d8 subsys=daemon level=info msg="Delete endpoint request" containerID=94a0bbfc3a endpointID=3235 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3d07b469-4d07-46fb-8f01-ec6c42ad27d8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=94a0bbfc3a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3235 identity=7040 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d07b469-4d07-46fb-8f01-ec6c42ad27d8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 416aff75-dbc5-4725-924a-93a3c2d28a93 default }" containerID=80a6c235429400c3e564a34a4aaf135133c6b688ec728dd40c33d06ff2ea5a2a datapathConfiguration="&{false false false false false }" interface=lxcfafcf8bc2858 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80a6c23542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2060 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80a6c23542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2060 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=80a6c23542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2060 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80a6c23542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2060 identity=18538 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80a6c23542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2060 identity=18538 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=80a6c23542 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2060 identity=18538 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=80a6c23542 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2060 identity=18538 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.194 92488849-0a8b-4cf5-a6ed-cd9bc24be845 default }" containerID=c0dfe867538f52f83a66bda9cbb01f23fe5833cd5747d3988a675866d59bf1f6 datapathConfiguration="&{false false false false false }" interface=lxc525301538bf8 k8sPodName=openstack/keystone-api-6c867f8d54-wznmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0dfe86753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-6c867f8d54-wznmm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0dfe86753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-6c867f8d54-wznmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.41 2c308547-36af-4bf7-ae46-c33619379112 default }" containerID=c4baacb5122badbd35ba39552a375dcd676c6139a97484613d974a62cae4ef23 datapathConfiguration="&{false false false false false }" interface=lxcfafefb30ffc3 k8sPodName=openstack/keystone-credential-setup-48kgr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4baacb512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-credential-setup-48kgr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4baacb512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=86be97e1-ec43-460d-8243-c67b7b37c934,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=86be97e1-ec43-460d-8243-c67b7b37c934,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-credential-setup-48kgr subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0dfe86753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 identity=23632 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-6c867f8d54-wznmm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0dfe86753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 identity=23632 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-6c867f8d54-wznmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c4baacb512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-credential-setup-48kgr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=86be97e1-ec43-460d-8243-c67b7b37c934;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=86be97e1-ec43-460d-8243-c67b7b37c934;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4baacb512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 identity=5080 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=86be97e1-ec43-460d-8243-c67b7b37c934,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=86be97e1-ec43-460d-8243-c67b7b37c934,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-credential-setup-48kgr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4baacb512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 identity=5080 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-credential-setup-48kgr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0dfe86753 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=109 identity=23632 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-6c867f8d54-wznmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0dfe86753 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=109 identity=23632 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-6c867f8d54-wznmm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c4baacb512 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1144 identity=5080 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-credential-setup-48kgr subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4baacb512 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1144 identity=5080 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-credential-setup-48kgr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c4baacb512 endpointID=1144 k8sNamespace=openstack k8sPodName=keystone-credential-setup-48kgr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=86be97e1-ec43-460d-8243-c67b7b37c934 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=86be97e1-ec43-460d-8243-c67b7b37c934 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c4baacb512 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1144 identity=5080 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-credential-setup-48kgr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 3c3bd555-bc3e-4354-b7e0-b52237218f99 default }" containerID=44122976b3d7947c7072bdf26ec1c78452303f3cf5b505a9d4652cf8bab72370 datapathConfiguration="&{false false false false false }" interface=lxcfd5f663d0025 k8sPodName=openstack/keystone-db-init-4jsz8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44122976b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2501 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-db-init-4jsz8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44122976b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2501 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9869ea54-4801-450f-91b6-85cf8382d65c,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=9869ea54-4801-450f-91b6-85cf8382d65c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-db-init-4jsz8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9869ea54-4801-450f-91b6-85cf8382d65c;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=9869ea54-4801-450f-91b6-85cf8382d65c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44122976b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2501 identity=64878 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9869ea54-4801-450f-91b6-85cf8382d65c,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=9869ea54-4801-450f-91b6-85cf8382d65c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-db-init-4jsz8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44122976b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2501 identity=64878 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-db-init-4jsz8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44122976b3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2501 identity=64878 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-db-init-4jsz8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=44122976b3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2501 identity=64878 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-db-init-4jsz8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=44122976b3 endpointID=2501 k8sNamespace=openstack k8sPodName=keystone-db-init-4jsz8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9869ea54-4801-450f-91b6-85cf8382d65c k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=9869ea54-4801-450f-91b6-85cf8382d65c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=44122976b3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2501 identity=64878 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-db-init-4jsz8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 e3687f40-d4af-44ab-aeb0-6e58ad1f7e54 default }" containerID=8a90aa7a7aeac8259b855b7fa9555a11c3183519a30cfc2b75a6baeee8514fa7 datapathConfiguration="&{false false false false false }" interface=lxc4ac141943b43 k8sPodName=openstack/keystone-fernet-setup-njhq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a90aa7a7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-fernet-setup-njhq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a90aa7a7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a2f383fa-00bf-495a-8e3a-2dd0608a0f11,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a2f383fa-00bf-495a-8e3a-2dd0608a0f11,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-fernet-setup-njhq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a2f383fa-00bf-495a-8e3a-2dd0608a0f11;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=a2f383fa-00bf-495a-8e3a-2dd0608a0f11;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a90aa7a7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identity=2765 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a2f383fa-00bf-495a-8e3a-2dd0608a0f11,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a2f383fa-00bf-495a-8e3a-2dd0608a0f11,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-fernet-setup-njhq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a90aa7a7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identity=2765 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-fernet-setup-njhq5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8a90aa7a7a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2260 identity=2765 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-fernet-setup-njhq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a90aa7a7a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2260 identity=2765 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-fernet-setup-njhq5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8a90aa7a7a endpointID=2260 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-njhq5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a2f383fa-00bf-495a-8e3a-2dd0608a0f11 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=a2f383fa-00bf-495a-8e3a-2dd0608a0f11 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8a90aa7a7a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2260 identity=2765 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/keystone-fernet-setup-njhq5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 91ceb93d-c7da-46bf-bd29-ab19c5d5f136 default }" containerID=98dca90ae57e642fd2fbe75f2b47bca59ecdd21d97d2047d11e782ec1d15ca12 datapathConfiguration="&{false false false false false }" interface=lxc949928ce2660 k8sPodName=openstack/keystone-db-sync-5dnts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98dca90ae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-db-sync-5dnts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98dca90ae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=695ea56a-2311-4493-bfc8-a736f1556c9d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=695ea56a-2311-4493-bfc8-a736f1556c9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-db-sync-5dnts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=695ea56a-2311-4493-bfc8-a736f1556c9d;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=695ea56a-2311-4493-bfc8-a736f1556c9d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98dca90ae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=10389 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=695ea56a-2311-4493-bfc8-a736f1556c9d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=695ea56a-2311-4493-bfc8-a736f1556c9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-db-sync-5dnts oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98dca90ae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=10389 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-db-sync-5dnts subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=98dca90ae5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=555 identity=10389 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-db-sync-5dnts subsys=endpoint level=info msg="Successful endpoint creation" containerID=98dca90ae5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=555 identity=10389 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-db-sync-5dnts subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=98dca90ae5 endpointID=555 k8sNamespace=openstack k8sPodName=keystone-db-sync-5dnts subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=695ea56a-2311-4493-bfc8-a736f1556c9d k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=695ea56a-2311-4493-bfc8-a736f1556c9d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=98dca90ae5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=555 identity=10389 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-db-sync-5dnts subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 9d66bcfc-3312-4c81-b996-56beaf590669 default }" containerID=cef7d0f18f9cbc40c5b269e264111fe0b54bdd8ef2c61be6e99d5a97d8021006 datapathConfiguration="&{false false false false false }" interface=lxc3894bf3dd008 k8sPodName=openstack/keystone-rabbit-init-dr8d8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cef7d0f18f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-rabbit-init-dr8d8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cef7d0f18f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c89c2f9f-92f5-42f7-9224-0b4f159e3bd2,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c89c2f9f-92f5-42f7-9224-0b4f159e3bd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-rabbit-init-dr8d8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c89c2f9f-92f5-42f7-9224-0b4f159e3bd2;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c89c2f9f-92f5-42f7-9224-0b4f159e3bd2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cef7d0f18f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 identity=14836 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c89c2f9f-92f5-42f7-9224-0b4f159e3bd2,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c89c2f9f-92f5-42f7-9224-0b4f159e3bd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-rabbit-init-dr8d8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cef7d0f18f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 identity=14836 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-rabbit-init-dr8d8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cef7d0f18f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2201 identity=14836 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-rabbit-init-dr8d8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cef7d0f18f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2201 identity=14836 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-rabbit-init-dr8d8 subsys=daemon level=info msg="Delete endpoint request" containerID=cef7d0f18f endpointID=2201 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-dr8d8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c89c2f9f-92f5-42f7-9224-0b4f159e3bd2 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c89c2f9f-92f5-42f7-9224-0b4f159e3bd2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cef7d0f18f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2201 identity=14836 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-rabbit-init-dr8d8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 9e16c30d-6fc8-4910-8bd1-e445167b088d default }" containerID=465d144daf2d2f52627a056e7ddec95d995b2829999ce758341ef334016b061f datapathConfiguration="&{false false false false false }" interface=lxc0d930872d6e6 k8sPodName=openstack/keystone-domain-manage-5x8xb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=465d144daf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=375 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-5x8xb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=465d144daf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=375 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=68249dc2-5aaf-4279-8e3c-6d9bf64102f7,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=68249dc2-5aaf-4279-8e3c-6d9bf64102f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-5x8xb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=68249dc2-5aaf-4279-8e3c-6d9bf64102f7;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=68249dc2-5aaf-4279-8e3c-6d9bf64102f7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=465d144daf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=375 identity=26152 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=68249dc2-5aaf-4279-8e3c-6d9bf64102f7,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=68249dc2-5aaf-4279-8e3c-6d9bf64102f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-5x8xb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=465d144daf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=375 identity=26152 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-5x8xb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=465d144daf datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=375 identity=26152 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-5x8xb subsys=endpoint level=info msg="Successful endpoint creation" containerID=465d144daf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=375 identity=26152 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-5x8xb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=465d144daf endpointID=375 k8sNamespace=openstack k8sPodName=keystone-domain-manage-5x8xb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=68249dc2-5aaf-4279-8e3c-6d9bf64102f7 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=68249dc2-5aaf-4279-8e3c-6d9bf64102f7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=465d144daf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=375 identity=26152 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-5x8xb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 e1cec7ac-4b92-43fb-b018-2f45273cbfb2 default }" containerID=73de7ab6ac64d14ca6ba28aba88eb30a9bdfa419a708ac5d9d16b0f7129e837a datapathConfiguration="&{false false false false false }" interface=lxc5b783cf3d136 k8sPodName=openstack/keystone-bootstrap-fjz9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73de7ab6ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2666 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-bootstrap-fjz9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73de7ab6ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2666 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8c8010a0-7de4-416b-bd7c-4af936c7b7e0,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=8c8010a0-7de4-416b-bd7c-4af936c7b7e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-bootstrap-fjz9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8c8010a0-7de4-416b-bd7c-4af936c7b7e0;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=8c8010a0-7de4-416b-bd7c-4af936c7b7e0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=73de7ab6ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2666 identity=9253 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8c8010a0-7de4-416b-bd7c-4af936c7b7e0,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=8c8010a0-7de4-416b-bd7c-4af936c7b7e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-bootstrap-fjz9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73de7ab6ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2666 identity=9253 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-bootstrap-fjz9t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73de7ab6ac datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2666 identity=9253 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-bootstrap-fjz9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=73de7ab6ac datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2666 identity=9253 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-bootstrap-fjz9t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=73de7ab6ac endpointID=2666 k8sNamespace=openstack k8sPodName=keystone-bootstrap-fjz9t subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8c8010a0-7de4-416b-bd7c-4af936c7b7e0 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=8c8010a0-7de4-416b-bd7c-4af936c7b7e0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=73de7ab6ac datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2666 identity=9253 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-bootstrap-fjz9t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 c48966ec-4335-4df0-b8e2-83e50fd7c4ff default }" containerID=c1b4421f9a9de2ba455282bb807cfa0a39c92095f5c0c1845c400fa05d16f4d7 datapathConfiguration="&{false false false false false }" interface=lxc3b02c6924678 k8sPodName=openstack/horizon-75b49cd5cc-zk9q2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1b4421f9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-zk9q2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 11ecfc6c-6494-4285-af91-58e78f7d4096 default }" containerID=4349e172aa9f308e84fbdc281ea645d8a760dbd2f85a820b6b940411e40b3768 datapathConfiguration="&{false false false false false }" interface=lxcc3e0c71454af k8sPodName=openstack/horizon-75b49cd5cc-5qwjw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4349e172aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-5qwjw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1b4421f9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-zk9q2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=4349e172aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-5qwjw subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1b4421f9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identity=3885 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-zk9q2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1b4421f9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identity=3885 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-zk9q2 subsys=endpoint level=warning msg="Unable update CRD identity information with a reference for this node" error="identity (id:\"3885\",key:\"[k8s:application=horizon k8s:component=server k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon k8s:io.kubernetes.pod.namespace=openstack k8s:release_group=horizon]\") does not exist" identity=3885 labels="[k8s:application=horizon k8s:component=server k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon k8s:io.kubernetes.pod.namespace=openstack k8s:release_group=horizon]" subsys=crd-allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4349e172aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-5qwjw line=611 subsys=endpoint level=warning msg="Key allocation attempt failed" attempt=0 error="unable to re-create missing master key '[k8s:application=horizon k8s:component=server k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon k8s:io.kubernetes.pod.namespace=openstack k8s:release_group=horizon]': 3885 while allocating ID: Unable recreate missing CRD identity \"[k8s:application=horizon k8s:component=server k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon k8s:io.kubernetes.pod.namespace=openstack k8s:release_group=horizon]\"->\"3885\": ciliumidentities.cilium.io \"3885\" already exists" key="[k8s:application=horizon k8s:component=server k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon k8s:io.kubernetes.pod.namespace=openstack k8s:release_group=horizon]" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4349e172aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=3885 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-5qwjw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4349e172aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=3885 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-5qwjw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 89720c9e-bf42-48f6-b124-9d727a82af42 default }" containerID=d92c116132220e78a9a9032850bce3cb342efa852d37552f555bf9aa816d8774 datapathConfiguration="&{false false false false false }" interface=lxcf150c18c9e0e k8sPodName=openstack/horizon-db-init-c278x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d92c116132 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/horizon-db-init-c278x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d92c116132 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=f0652e57-f309-45b0-9188-988a66af6170,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=f0652e57-f309-45b0-9188-988a66af6170,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/horizon-db-init-c278x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=f0652e57-f309-45b0-9188-988a66af6170;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=f0652e57-f309-45b0-9188-988a66af6170;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d92c116132 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=10099 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=f0652e57-f309-45b0-9188-988a66af6170,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=f0652e57-f309-45b0-9188-988a66af6170,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/horizon-db-init-c278x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d92c116132 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=10099 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/horizon-db-init-c278x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1b4421f9a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=552 identity=3885 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-zk9q2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1b4421f9a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=552 identity=3885 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-zk9q2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4349e172aa datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=34 identity=3885 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-5qwjw subsys=endpoint level=info msg="Successful endpoint creation" containerID=4349e172aa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=34 identity=3885 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-5qwjw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.40 b518a15c-a5dd-44e7-b3c7-5392a2c282cb default }" containerID=2ede3a725776ec9dac75dc0c386a8500b3ed7ba692e98cef03201b046be21730 datapathConfiguration="&{false false false false false }" interface=lxcbcd2d26baea9 k8sPodName=openstack/horizon-75b49cd5cc-jh86p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ede3a7257 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-jh86p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ede3a7257 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-jh86p subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2ede3a7257 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=3885 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-jh86p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ede3a7257 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=3885 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-jh86p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d92c116132 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=17 identity=10099 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/horizon-db-init-c278x subsys=endpoint level=info msg="Successful endpoint creation" containerID=d92c116132 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=17 identity=10099 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/horizon-db-init-c278x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2ede3a7257 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=348 identity=3885 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-jh86p subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ede3a7257 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=348 identity=3885 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/horizon-75b49cd5cc-jh86p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d92c116132 endpointID=17 k8sNamespace=openstack k8sPodName=horizon-db-init-c278x subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=f0652e57-f309-45b0-9188-988a66af6170 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=f0652e57-f309-45b0-9188-988a66af6170 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=d92c116132 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=17 identity=10099 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/horizon-db-init-c278x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 03ab6313-b777-4a0b-96ae-bf2616ca30dc default }" containerID=f27fb069feeeaf46855b27a014f62995e565d5d83aa125b8b028d09547019975 datapathConfiguration="&{false false false false false }" interface=lxc51daf38474c1 k8sPodName=openstack/horizon-db-sync-vh6mz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f27fb069fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/horizon-db-sync-vh6mz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f27fb069fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=c3fe89de-afc1-4d95-8ee2-4ee5569bb17a,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=c3fe89de-afc1-4d95-8ee2-4ee5569bb17a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/horizon-db-sync-vh6mz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=c3fe89de-afc1-4d95-8ee2-4ee5569bb17a;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=c3fe89de-afc1-4d95-8ee2-4ee5569bb17a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f27fb069fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 identity=35606 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=c3fe89de-afc1-4d95-8ee2-4ee5569bb17a,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=c3fe89de-afc1-4d95-8ee2-4ee5569bb17a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/horizon-db-sync-vh6mz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f27fb069fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 identity=35606 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/horizon-db-sync-vh6mz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f27fb069fe datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1764 identity=35606 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/horizon-db-sync-vh6mz subsys=endpoint level=info msg="Successful endpoint creation" containerID=f27fb069fe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1764 identity=35606 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/horizon-db-sync-vh6mz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f27fb069fe endpointID=1764 k8sNamespace=openstack k8sPodName=horizon-db-sync-vh6mz subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=c3fe89de-afc1-4d95-8ee2-4ee5569bb17a k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=c3fe89de-afc1-4d95-8ee2-4ee5569bb17a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=f27fb069fe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1764 identity=35606 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/horizon-db-sync-vh6mz subsys=endpoint level=warning msg="Network status error received, restarting client connections" error="an error on the server (\"[+]ping ok\\n[+]log ok\\n[-]etcd failed: reason withheld\\n[+]poststarthook/start-kube-apiserver-admission-initializer ok\\n[+]poststarthook/generic-apiserver-start-informers ok\\n[+]poststarthook/priority-and-fairness-config-consumer ok\\n[+]poststarthook/priority-and-fairness-filter ok\\n[+]poststarthook/storage-object-count-tracker-hook ok\\n[+]poststarthook/start-apiextensions-informers ok\\n[+]poststarthook/start-apiextensions-controllers ok\\n[+]poststarthook/crd-informer-synced ok\\n[+]poststarthook/start-service-ip-repair-controllers ok\\n[+]poststarthook/rbac/bootstrap-roles ok\\n[+]poststarthook/scheduling/bootstrap-system-priority-classes ok\\n[+]poststarthook/priority-and-fairness-config-producer ok\\n[+]poststarthook/start-system-namespaces-controller ok\\n[+]poststarthook/bootstrap-controller ok\\n[+]poststarthook/start-cluster-authentication-info-controller ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-controller ok\\n[+]poststarthook/start-deprecated-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-legacy-token-tracking-controller ok\\n[+]poststarthook/aggregator-reload-proxy-client-cert ok\\n[+]poststarthook/start-kube-aggregator-informers ok\\n[+]poststarthook/apiservice-registration-controller ok\\n[+]poststarthook/apiservice-status-available-controller ok\\n[+]poststarthook/kube-apiserver-autoregistration ok\\n[+]autoregister-completion ok\\n[+]poststarthook/apiservice-openapi-controller ok\\n[+]poststarthook/apiservice-openapiv3-controller ok\\n[+]poststarthook/apiservice-discovery-controller ok\\nhealthz check failed\") has prevented the request from succeeding (get healthz.meta.k8s.io)" subsys=k8s-client