level=info msg="Memory available for map entries (0.003% of 16764960768B): 41912401B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.112387ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="60.281µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="946.103µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.85µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=98.570668ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.97µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.861µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="57.811µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="60.993µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="76.982µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="489.851µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.801µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=28.400832ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=4.929829ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="31.301µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="31.762µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="733.417µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="100.392µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="73.202µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=44.669103ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="103.612µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="10.18µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.153.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.997498ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.52µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.864738ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.7µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.74732ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="11.89µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.21µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration=910ns function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="27.62µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="11.661µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="238.675µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="298.017µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.46µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="30.201µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="209.375µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="416.85µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="859.821µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.331µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="18.54µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.153 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.153 ipAddr.ipv6="" k8sNodeIP=199.204.45.153 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.153" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.93" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.153" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.153} {CiliumInternalIP 10.0.0.93}] 10.0.0.0/24 [] [] 10.0.0.95 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:37251" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=3.081307359s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Start hook executed" duration="37.421µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="6.38µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="35.901µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="8.92µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Creating host endpoint" subsys=daemon level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=4.045470921s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=308.443398ms file-path=/var/run/cilium/state/templates/1042fa00070949f20cd33b74feedd7e3d757c1e7ad18819bdc2f7314f9614d6e/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=68 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 4694f1f5-9b05-4844-9082-5d1d05e67f1f default }" containerID=95bc8fc51b9056180d3982dda9629d76451bd2e103fd9f2eab8c60c08ba70d4d datapathConfiguration="&{false false false false false }" interface=lxc2b55b7b08444 k8sPodName=kube-system/coredns-7c96b6546b-l6q8r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95bc8fc51b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2018 ipv4=10.0.0.31 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-l6q8r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95bc8fc51b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2018 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.31 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-l6q8r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=95bc8fc51b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2018 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-l6q8r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95bc8fc51b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2018 identity=58026 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.31 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-l6q8r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95bc8fc51b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2018 identity=58026 ipv4=10.0.0.31 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-l6q8r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 d4078862-2403-4741-acee-61c54c79e6db default }" containerID=3eb06c8df6a14155f3469f4e2a7462bde3afeb00c2bd4bd9a54175449fb334f8 datapathConfiguration="&{false false false false false }" interface=lxc96de10670e02 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qwrxq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3eb06c8df6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 ipv4=10.0.0.213 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qwrxq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3eb06c8df6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=3621a822-f6f6-4004-9004-b2e84f51af2a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=3621a822-f6f6-4004-9004-b2e84f51af2a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.213 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qwrxq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=3621a822-f6f6-4004-9004-b2e84f51af2a;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=3621a822-f6f6-4004-9004-b2e84f51af2a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3eb06c8df6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identity=22183 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=3621a822-f6f6-4004-9004-b2e84f51af2a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=3621a822-f6f6-4004-9004-b2e84f51af2a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.213 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qwrxq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3eb06c8df6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identity=22183 ipv4=10.0.0.213 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qwrxq subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 ipv4=10.0.0.95 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identityLabels="reserved:health" ipv4=10.0.0.95 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identity=4 identityLabels="reserved:health" ipv4=10.0.0.95 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.082339891s file-path=/var/run/cilium/state/templates/7eaf31e0844562b44c6258638ac36f9bf2f203b50a688a6b195baa649bdeda3c/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2010 identity=4 ipv4=10.0.0.95 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3eb06c8df6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=711 identity=22183 ipv4=10.0.0.213 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qwrxq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=95bc8fc51b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2018 identity=58026 ipv4=10.0.0.31 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-l6q8r subsys=endpoint level=info msg="Successful endpoint creation" containerID=3eb06c8df6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=711 identity=22183 ipv4=10.0.0.213 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qwrxq subsys=daemon level=info msg="Successful endpoint creation" containerID=95bc8fc51b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2018 identity=58026 ipv4=10.0.0.31 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-l6q8r subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3eb06c8df6 endpointID=711 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-qwrxq subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=3621a822-f6f6-4004-9004-b2e84f51af2a k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=3621a822-f6f6-4004-9004-b2e84f51af2a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=3eb06c8df6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=711 identity=22183 ipv4=10.0.0.213 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qwrxq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 b261963d-f532-4e4d-a1e0-51a2c7f6a816 default }" containerID=69027387a2281a654cefada4b8abddd62b1e965eef3c84ec716d228a40469a19 datapathConfiguration="&{false false false false false }" interface=lxc61b18aee09ae k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-d4dx2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69027387a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-d4dx2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69027387a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-d4dx2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=69027387a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-d4dx2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69027387a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 identity=9493 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-d4dx2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69027387a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 identity=9493 ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-d4dx2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69027387a2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1630 identity=9493 ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-d4dx2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=69027387a2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1630 identity=9493 ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-d4dx2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=68 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00068 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00068 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00068 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00068:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=68 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 50e1ae55-52cb-482f-8760-5f75ab946097 default }" containerID=42884692d0631dcf405c242a1a1cc1c3e40fca7e918ae66f6af91cc7eade1c1c datapathConfiguration="&{false false false false false }" interface=lxcb11eb4d564cc k8sPodName=kube-system/coredns-67659f764b-hlf5q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42884692d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-hlf5q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42884692d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-hlf5q subsys=endpoint level=info msg="Identity of endpoint changed" containerID=42884692d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identity=58026 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-hlf5q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42884692d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identity=58026 ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-hlf5q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 6e7077d1-20d0-43c6-8ec4-6afa8003f403 default }" containerID=84804dab9dfa7e799616bfa9f6c719f304c726e6b617799de6268c5e104cb620 datapathConfiguration="&{false false false false false }" interface=lxc5ad3ddcea018 k8sPodName=kube-system/coredns-67659f764b-trtcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84804dab9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 ipv4=10.0.0.81 ipv6= k8sPodName=kube-system/coredns-67659f764b-trtcs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84804dab9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.81 ipv6= k8sPodName=kube-system/coredns-67659f764b-trtcs subsys=endpoint level=info msg="Identity of endpoint changed" containerID=84804dab9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identity=58026 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.81 ipv6= k8sPodName=kube-system/coredns-67659f764b-trtcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84804dab9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identity=58026 ipv4=10.0.0.81 ipv6= k8sPodName=kube-system/coredns-67659f764b-trtcs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42884692d0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1117 identity=58026 ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-hlf5q subsys=endpoint level=info msg="Successful endpoint creation" containerID=42884692d0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1117 identity=58026 ipv4=10.0.0.218 ipv6= k8sPodName=kube-system/coredns-67659f764b-hlf5q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=84804dab9d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=320 identity=58026 ipv4=10.0.0.81 ipv6= k8sPodName=kube-system/coredns-67659f764b-trtcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=84804dab9d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=320 identity=58026 ipv4=10.0.0.81 ipv6= k8sPodName=kube-system/coredns-67659f764b-trtcs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.122 fed03921-246e-47c6-9846-92613e9b5274 default }" containerID=4cddcca705dde57c79b44f7a9d659c7b95bfb9673547555094b09753f9c12861 datapathConfiguration="&{false false false false false }" interface=lxcb477eef87417 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xv97g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cddcca705 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xv97g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cddcca705 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xv97g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4cddcca705 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 identity=49246 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xv97g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cddcca705 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 identity=49246 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xv97g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4cddcca705 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2048 identity=49246 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xv97g subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cddcca705 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2048 identity=49246 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xv97g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=95bc8fc51b endpointID=2018 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-l6q8r subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=95bc8fc51b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2018 identity=58026 ipv4=10.0.0.31 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-l6q8r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 a7b893bc-997d-49fd-a09e-eb52d99871bb default }" containerID=4a0520f6634bd5d23bdbeb321a1ab534c5ac5293c0614e862d596087e54a1985 datapathConfiguration="&{false false false false false }" interface=lxc1eacc659d570 k8sPodName=cert-manager/cert-manager-75969b45cf-ds4l2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a0520f663 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ds4l2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a0520f663 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ds4l2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4a0520f663 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ds4l2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a0520f663 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identity=55129 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ds4l2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a0520f663 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identity=55129 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ds4l2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 c7c2cf14-4750-4ed1-8f7e-454708a7785e default }" containerID=9035c64b5ee8f76e2399f9960fb187d134df635b1aa2310134e04d11b7fc85cb datapathConfiguration="&{false false false false false }" interface=lxc3446dabc2138 k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-c9wtb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9035c64b5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-c9wtb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9035c64b5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-c9wtb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.107 988977d7-e876-44a6-aa6c-7a8d09d6cec9 default }" containerID=2b793a14344ae50a9da440b11a41ea2d3fb4875ea9324bd89c6f14a3683d6044 datapathConfiguration="&{false false false false false }" interface=lxc977f1a9784f4 k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-9rlmp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b793a1434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-9rlmp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b793a1434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-9rlmp subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9035c64b5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identity=38129 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-c9wtb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9035c64b5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identity=38129 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-c9wtb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b793a1434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identity=24206 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-9rlmp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b793a1434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identity=24206 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-9rlmp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a0520f663 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=181 identity=55129 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ds4l2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a0520f663 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=181 identity=55129 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ds4l2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9035c64b5e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1212 identity=38129 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-c9wtb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9035c64b5e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1212 identity=38129 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-c9wtb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2b793a1434 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=609 identity=24206 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-9rlmp subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b793a1434 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=609 identity=24206 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-9rlmp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.203 bd45d6fb-d95f-4230-b880-d8a9c56327e3 default }" containerID=e680dd299e73a6f8337af62876fe57345021fb8a3313fe08bea3162458bfce0f datapathConfiguration="&{false false false false false }" interface=lxcdc8cff6ebd4b k8sPodName=cert-manager/cert-manager-startupapicheck-9w5g6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e680dd299e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9w5g6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e680dd299e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=e7708f3d-f93f-4d9c-be82-2661a312c94e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=e7708f3d-f93f-4d9c-be82-2661a312c94e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9w5g6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=e7708f3d-f93f-4d9c-be82-2661a312c94e;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=e7708f3d-f93f-4d9c-be82-2661a312c94e;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e680dd299e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=39132 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=e7708f3d-f93f-4d9c-be82-2661a312c94e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=e7708f3d-f93f-4d9c-be82-2661a312c94e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9w5g6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e680dd299e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=39132 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9w5g6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e680dd299e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1809 identity=39132 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9w5g6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e680dd299e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1809 identity=39132 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9w5g6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e680dd299e endpointID=1809 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-9w5g6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=e7708f3d-f93f-4d9c-be82-2661a312c94e k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=e7708f3d-f93f-4d9c-be82-2661a312c94e k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=e680dd299e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1809 identity=39132 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9w5g6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 f2acf004-394f-4ba0-a75d-11d383a8978d default }" containerID=c0b1296d19e0240ed6dbb029a471d903fd8e154dd368bcae10d35d1e0c9cf1ef datapathConfiguration="&{false false false false false }" interface=lxc7b4a5c39adf0 k8sPodName=ingress-nginx/ingress-nginx-admission-create-mbb85 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0b1296d19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 ipv4=10.0.0.231 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mbb85 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0b1296d19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3b1d7800-4d97-409e-b4d7-4042b66df8c4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=3b1d7800-4d97-409e-b4d7-4042b66df8c4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.231 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mbb85 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=3b1d7800-4d97-409e-b4d7-4042b66df8c4;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=3b1d7800-4d97-409e-b4d7-4042b66df8c4;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0b1296d19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 identity=54881 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3b1d7800-4d97-409e-b4d7-4042b66df8c4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=3b1d7800-4d97-409e-b4d7-4042b66df8c4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.231 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mbb85 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0b1296d19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 identity=54881 ipv4=10.0.0.231 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mbb85 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c0b1296d19 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3543 identity=54881 ipv4=10.0.0.231 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mbb85 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0b1296d19 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3543 identity=54881 ipv4=10.0.0.231 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mbb85 subsys=daemon level=info msg="Delete endpoint request" containerID=c0b1296d19 endpointID=3543 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-mbb85 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=3b1d7800-4d97-409e-b4d7-4042b66df8c4 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=3b1d7800-4d97-409e-b4d7-4042b66df8c4 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=c0b1296d19 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3543 identity=54881 ipv4=10.0.0.231 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mbb85 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 9242bb5b-eba2-4fbe-b4a3-de7ba17d7415 default }" containerID=dd758c3980dece90df65258e79b157d7b4de21c2ef00c8ebec3358a053294d8b datapathConfiguration="&{false false false false false }" interface=lxc7796c5c17332 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2qhx8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd758c3980 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1827 ipv4=10.0.0.101 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2qhx8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd758c3980 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1827 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.101 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2qhx8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd758c3980 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1827 identity=19761 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.101 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2qhx8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd758c3980 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1827 identity=19761 ipv4=10.0.0.101 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2qhx8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dd758c3980 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1827 identity=19761 ipv4=10.0.0.101 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2qhx8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd758c3980 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1827 identity=19761 ipv4=10.0.0.101 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2qhx8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.123 c79a6633-2831-4767-bf53-85bb7f81ab2d default }" containerID=0d15c8ec724fd58f7314e096941e66a215df77bfeac99cbb3aa0d87cd5f74fb1 datapathConfiguration="&{false false false false false }" interface=lxc14053e35acf0 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mfjgz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d15c8ec72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1493 ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mfjgz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d15c8ec72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1493 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6adb1c4e-5896-4b8a-8365-77872b34fb42,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=6adb1c4e-5896-4b8a-8365-77872b34fb42,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mfjgz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=6adb1c4e-5896-4b8a-8365-77872b34fb42;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=6adb1c4e-5896-4b8a-8365-77872b34fb42;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d15c8ec72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1493 identity=4579 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6adb1c4e-5896-4b8a-8365-77872b34fb42,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=6adb1c4e-5896-4b8a-8365-77872b34fb42,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mfjgz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d15c8ec72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1493 identity=4579 ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mfjgz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d15c8ec72 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1493 identity=4579 ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mfjgz subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d15c8ec72 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1493 identity=4579 ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mfjgz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0d15c8ec72 endpointID=1493 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-mfjgz subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=6adb1c4e-5896-4b8a-8365-77872b34fb42 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=6adb1c4e-5896-4b8a-8365-77872b34fb42 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=0d15c8ec72 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1493 identity=4579 ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mfjgz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 214ef9d8-3314-4db8-aa02-43b9f2ed55e9 default }" containerID=63c3c786582520a9af62032afaa7e38707946ab27ce847604aae07637e4d3761 datapathConfiguration="&{false false false false false }" interface=lxcefb98671252b k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-7lbh9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63c3c78658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-7lbh9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63c3c78658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-7lbh9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63c3c78658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 identity=19784 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-7lbh9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63c3c78658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2896 identity=19784 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-7lbh9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.253 ab74d079-faf3-4b9d-a705-9a106d75ea24 default }" containerID=44046ccf3f16511a83820d845e5b341376963024aceb5b9457f2d71840704652 datapathConfiguration="&{false false false false false }" interface=lxce5153cfc5906 k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-2lm2r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44046ccf3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-2lm2r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44046ccf3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-2lm2r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44046ccf3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 identity=20200 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-2lm2r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44046ccf3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 identity=20200 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-2lm2r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63c3c78658 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2896 identity=19784 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-7lbh9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=63c3c78658 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2896 identity=19784 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-7lbh9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=44046ccf3f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2123 identity=20200 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-2lm2r subsys=endpoint level=info msg="Successful endpoint creation" containerID=44046ccf3f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2123 identity=20200 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-2lm2r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.150 612edd0f-e273-4bdf-a0f4-14f9f9c34a80 default }" containerID=5191597f6317610719bcaf6c165c7652225c7d221d4b9c3fe5634c2e4c9840b6 datapathConfiguration="&{false false false false false }" interface=lxcd7246a829700 k8sPodName=openstack/pxc-operator-59d66cbc78-bt9dn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5191597f63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-bt9dn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5191597f63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-bt9dn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5191597f63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identity=59625 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-bt9dn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5191597f63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identity=59625 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-bt9dn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5191597f63 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=985 identity=59625 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-bt9dn subsys=endpoint level=info msg="Successful endpoint creation" containerID=5191597f63 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=985 identity=59625 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-bt9dn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.32 8061a353-f72a-4388-9606-2f3ae5f0618a default }" containerID=bb5d2e78750efc3f8b515bb7627111e3d6f142cdb4bbabea0630ead6ff82e06e datapathConfiguration="&{false false false false false }" interface=lxc8c4c892121e4 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb5d2e7875 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb5d2e7875 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb5d2e7875 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 identity=24624 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb5d2e7875 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 identity=24624 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bb5d2e7875 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2050 identity=24624 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb5d2e7875 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2050 identity=24624 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.238 3377600d-4a74-4070-aa52-483e7fb1344f default }" containerID=8f819b69a95782e5a6264f62567d354088472978e07d23f0c8bed0a318237db4 datapathConfiguration="&{false false false false false }" interface=lxcf53c5d802179 k8sPodName=local-path-storage/helper-pod-create-pvc-6f20913f-ccfa-4e47-99cb-0f874ebdaebd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f819b69a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f20913f-ccfa-4e47-99cb-0f874ebdaebd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f819b69a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f20913f-ccfa-4e47-99cb-0f874ebdaebd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f819b69a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identity=37009 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f20913f-ccfa-4e47-99cb-0f874ebdaebd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f819b69a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identity=37009 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f20913f-ccfa-4e47-99cb-0f874ebdaebd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f819b69a9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2254 identity=37009 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f20913f-ccfa-4e47-99cb-0f874ebdaebd subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f819b69a9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2254 identity=37009 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f20913f-ccfa-4e47-99cb-0f874ebdaebd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8f819b69a9 endpointID=2254 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6f20913f-ccfa-4e47-99cb-0f874ebdaebd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8f819b69a9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2254 identity=37009 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f20913f-ccfa-4e47-99cb-0f874ebdaebd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 8e8e5208-2968-46f4-b25c-5e8a4c0400f8 default }" containerID=13a179af39c0e2861940e3daa96e4a5fc9275b1a914cdbb3479e3c0f3f770400 datapathConfiguration="&{false false false false false }" interface=lxc2f615e1e6228 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13a179af39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2311 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13a179af39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2311 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=13a179af39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2311 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=13a179af39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2311 identity=51149 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13a179af39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2311 identity=51149 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13a179af39 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2311 identity=51149 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=13a179af39 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2311 identity=51149 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 0535ca35-5ba7-4708-8d1b-12a3ad56d023 default }" containerID=dc2b6205975c1e01adf0113db07ba054fab4e06bd0e75fe4e568328651368b92 datapathConfiguration="&{false false false false false }" interface=lxcddf93820ac22 k8sPodName=openstack/memcached-memcached-c47d949f5-drljc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc2b620597 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-drljc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc2b620597 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-drljc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dc2b620597 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-drljc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc2b620597 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=23319 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-drljc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc2b620597 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=23319 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-drljc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc2b620597 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=24 identity=23319 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-drljc subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc2b620597 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=24 identity=23319 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-drljc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.46 fedb4031-3f76-425b-b8e4-bd124dabe81b default }" containerID=9f436b51f5e4ace646cc5f609c0e6fdd46dca1c39ddb72456ebaff2da1593501 datapathConfiguration="&{false false false false false }" interface=lxcf96e18f2725a k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f436b51f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 ipv4=10.0.0.46 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f436b51f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.46 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f436b51f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identity=3575 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.46 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f436b51f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identity=3575 ipv4=10.0.0.46 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9f436b51f5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1347 identity=3575 ipv4=10.0.0.46 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f436b51f5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1347 identity=3575 ipv4=10.0.0.46 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.9 51583c03-5600-47d4-849d-0c6280b91a14 default }" containerID=52e7972b481353340bce72be9565850f44bd15677ffa094bf9f372b6fc8524aa datapathConfiguration="&{false false false false false }" interface=lxc069673d5aaaf k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nfrd5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52e7972b48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2056 ipv4=10.0.0.9 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nfrd5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52e7972b48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2056 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.9 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nfrd5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52e7972b48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2056 identity=46182 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.9 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nfrd5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52e7972b48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2056 identity=46182 ipv4=10.0.0.9 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nfrd5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=52e7972b48 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2056 identity=46182 ipv4=10.0.0.9 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nfrd5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=52e7972b48 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2056 identity=46182 ipv4=10.0.0.9 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nfrd5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.042295661634706924 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.90 c3f74fe1-9c57-4dda-8f26-b56b94f7ecc5 default }" containerID=8b12db728106951ce8f188ad2ae1c5460a3b207b27724a76ea22934a04ec3688 datapathConfiguration="&{false false false false false }" interface=lxc6f5b3899ea11 k8sPodName=monitoring/kube-prometheus-stack-admission-create-96rch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b12db7281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-96rch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b12db7281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=2199f042-fef2-43bd-8f14-ae8da112a32c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=2199f042-fef2-43bd-8f14-ae8da112a32c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-96rch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=2199f042-fef2-43bd-8f14-ae8da112a32c;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=2199f042-fef2-43bd-8f14-ae8da112a32c;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b12db7281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=5950 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=2199f042-fef2-43bd-8f14-ae8da112a32c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=2199f042-fef2-43bd-8f14-ae8da112a32c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-96rch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b12db7281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=5950 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-96rch subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8b12db7281 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1744 identity=5950 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-96rch subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b12db7281 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1744 identity=5950 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-96rch subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8b12db7281 endpointID=1744 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-96rch subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=2199f042-fef2-43bd-8f14-ae8da112a32c k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=2199f042-fef2-43bd-8f14-ae8da112a32c k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=8b12db7281 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1744 identity=5950 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-96rch subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 bb5c8404-10a2-4e09-8464-5b6def38218d default }" containerID=aeccefdaf8c1e96c863784e6f23c9b5c934be49007bbb0f8db842740dc95941e datapathConfiguration="&{false false false false false }" interface=lxc1652736ea24c k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-4kkss labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aeccefdaf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-4kkss subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aeccefdaf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-4kkss subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aeccefdaf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 identity=27734 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-4kkss oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aeccefdaf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 identity=27734 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-4kkss subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.239 b7089879-bf8c-43be-8d10-f9bb860049bb default }" containerID=37541245826fd8101f6bba2a125f2af5c042f4c316c90829f1c5b35cec2ce11d datapathConfiguration="&{false false false false false }" interface=lxce53f8986638f k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-qr62z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3754124582 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-qr62z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3754124582 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-qr62z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3754124582 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identity=5224 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-qr62z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3754124582 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identity=5224 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-qr62z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 61100a7c-d439-4d14-9aea-373b3cb39527 default }" containerID=1ba727696919bbc4dce1cae30ad8c55285c971d92158c9c4984a2b14938d2649 datapathConfiguration="&{false false false false false }" interface=lxc9ee489c5eec5 k8sPodName=monitoring/kube-prometheus-stack-grafana-5c6896849b-knqm9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ba7276969 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c6896849b-knqm9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ba7276969 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c6896849b-knqm9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ba7276969 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identity=17768 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c6896849b-knqm9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ba7276969 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identity=17768 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c6896849b-knqm9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aeccefdaf8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2823 identity=27734 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-4kkss subsys=endpoint level=info msg="Successful endpoint creation" containerID=aeccefdaf8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2823 identity=27734 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-4kkss subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3754124582 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=379 identity=5224 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-qr62z subsys=endpoint level=info msg="Successful endpoint creation" containerID=3754124582 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=379 identity=5224 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-qr62z subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1ba7276969 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3035 identity=17768 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c6896849b-knqm9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ba7276969 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3035 identity=17768 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c6896849b-knqm9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.179 c0e3725d-76af-4c51-8ea2-323f30a13893 default }" containerID=7609ac453aa376f7ceffe09c3c649443f0f23411cbea0f8d64a2aae0aa1641c2 datapathConfiguration="&{false false false false false }" interface=lxc40e75c203a9f k8sPodName=monitoring/kube-prometheus-stack-admission-patch-95h2x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7609ac453a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-95h2x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7609ac453a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=48327cf1-0a27-4d75-8ca8-d2460bbc193d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=48327cf1-0a27-4d75-8ca8-d2460bbc193d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-95h2x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=48327cf1-0a27-4d75-8ca8-d2460bbc193d;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=48327cf1-0a27-4d75-8ca8-d2460bbc193d;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7609ac453a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identity=43461 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=48327cf1-0a27-4d75-8ca8-d2460bbc193d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=48327cf1-0a27-4d75-8ca8-d2460bbc193d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-95h2x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7609ac453a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identity=43461 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-95h2x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7609ac453a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=773 identity=43461 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-95h2x subsys=endpoint level=info msg="Successful endpoint creation" containerID=7609ac453a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=773 identity=43461 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-95h2x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.83 a16ad363-f9b1-4f04-be55-1787ab4710b3 default }" containerID=4dac8eb7ac09a733c9c9a80ca9776c03da119c6b8ee6f7b89928ea0477f43da8 datapathConfiguration="&{false false false false false }" interface=lxc538d6c7ce55d k8sPodName=local-path-storage/helper-pod-create-pvc-2e7589de-c71e-4bf9-a62a-99b22f3be0b5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dac8eb7ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3036 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e7589de-c71e-4bf9-a62a-99b22f3be0b5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dac8eb7ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3036 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e7589de-c71e-4bf9-a62a-99b22f3be0b5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4dac8eb7ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3036 identity=37009 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e7589de-c71e-4bf9-a62a-99b22f3be0b5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4dac8eb7ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3036 identity=37009 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e7589de-c71e-4bf9-a62a-99b22f3be0b5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4dac8eb7ac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3036 identity=37009 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e7589de-c71e-4bf9-a62a-99b22f3be0b5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dac8eb7ac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3036 identity=37009 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e7589de-c71e-4bf9-a62a-99b22f3be0b5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.169 afdb59ae-3e65-4673-8ada-da69c899b0db default }" containerID=0536e60d209fa5c7c42903b0906f1ad2c481d441e3b1bb065fba5410d0564da3 datapathConfiguration="&{false false false false false }" interface=lxc7d5092c841d5 k8sPodName=local-path-storage/helper-pod-create-pvc-6a3cbb09-d929-43de-bb6a-8ae76accbc1d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0536e60d20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1869 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a3cbb09-d929-43de-bb6a-8ae76accbc1d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0536e60d20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1869 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a3cbb09-d929-43de-bb6a-8ae76accbc1d subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0536e60d20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1869 identity=37009 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a3cbb09-d929-43de-bb6a-8ae76accbc1d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0536e60d20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1869 identity=37009 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a3cbb09-d929-43de-bb6a-8ae76accbc1d subsys=endpoint level=info msg="Delete endpoint request" containerID=7609ac453a endpointID=773 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-95h2x subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=48327cf1-0a27-4d75-8ca8-d2460bbc193d k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=48327cf1-0a27-4d75-8ca8-d2460bbc193d k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=7609ac453a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=773 identity=43461 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-95h2x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0536e60d20 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1869 identity=37009 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a3cbb09-d929-43de-bb6a-8ae76accbc1d subsys=endpoint level=info msg="Successful endpoint creation" containerID=0536e60d20 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1869 identity=37009 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a3cbb09-d929-43de-bb6a-8ae76accbc1d subsys=daemon level=info msg="Delete endpoint request" containerID=0536e60d20 endpointID=1869 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6a3cbb09-d929-43de-bb6a-8ae76accbc1d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=4dac8eb7ac endpointID=3036 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2e7589de-c71e-4bf9-a62a-99b22f3be0b5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0536e60d20 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1869 identity=37009 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a3cbb09-d929-43de-bb6a-8ae76accbc1d subsys=endpoint level=info msg="Removed endpoint" containerID=4dac8eb7ac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3036 identity=37009 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e7589de-c71e-4bf9-a62a-99b22f3be0b5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 46596d73-9586-4e99-ba26-3452cc5bb0b1 default }" containerID=08f4ce3277ea0100e672bf023080e978dc05d09eed74be2a5fb6765e67d05863 datapathConfiguration="&{false false false false false }" interface=lxcbfe88648f272 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08f4ce3277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08f4ce3277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08f4ce3277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identity=44806 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08f4ce3277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identity=44806 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=08f4ce3277 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=696 identity=44806 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=08f4ce3277 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=696 identity=44806 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.40 d0617e4d-0888-4c6d-b9c8-11e805f37d51 default }" containerID=4ea08de3955271d7382d3fe24610eb30cea0e8f177bfb3cc4581439c4e726cf2 datapathConfiguration="&{false false false false false }" interface=lxc7110ed0c5775 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ea08de395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ea08de395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ea08de395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identity=41620 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ea08de395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identity=41620 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ea08de395 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=683 identity=41620 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ea08de395 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=683 identity=41620 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.164 5704fdf6-84d7-418a-aec8-d66f06aecda7 default }" containerID=b77fc4189a64731521eb1a53de31ad5d97b677f07c4dae74987c7ebbdf4cd2f8 datapathConfiguration="&{false false false false false }" interface=lxc08251619eabd k8sPodName=local-path-storage/helper-pod-create-pvc-303ec735-9f1d-4cde-a4af-868cda1b2f3c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b77fc4189a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-303ec735-9f1d-4cde-a4af-868cda1b2f3c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b77fc4189a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-303ec735-9f1d-4cde-a4af-868cda1b2f3c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b77fc4189a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 identity=37009 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-303ec735-9f1d-4cde-a4af-868cda1b2f3c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b77fc4189a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 identity=37009 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-303ec735-9f1d-4cde-a4af-868cda1b2f3c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b77fc4189a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1993 identity=37009 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-303ec735-9f1d-4cde-a4af-868cda1b2f3c subsys=endpoint level=info msg="Successful endpoint creation" containerID=b77fc4189a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1993 identity=37009 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-303ec735-9f1d-4cde-a4af-868cda1b2f3c subsys=daemon level=info msg="Delete endpoint request" containerID=b77fc4189a endpointID=1993 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-303ec735-9f1d-4cde-a4af-868cda1b2f3c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b77fc4189a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1993 identity=37009 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-303ec735-9f1d-4cde-a4af-868cda1b2f3c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 24af587b-97bb-45c9-b6a9-035c77c97366 default }" containerID=1582c0f0c92dbecce51f9e50a9202f14fa13741cdd1477e629fa3d95d44bcd8d datapathConfiguration="&{false false false false false }" interface=lxcd35a8bcb5c11 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1582c0f0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1582c0f0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1582c0f0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identity=43075 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1582c0f0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identity=43075 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1582c0f0c9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1655 identity=43075 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1582c0f0c9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1655 identity=43075 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.119 4b74c24d-b7ff-480b-9767-fff6eba46c0b default }" containerID=3a8b44851ecba646bdba3b2fdec70c686cf461fca58f170365559f2d02639995 datapathConfiguration="&{false false false false false }" interface=lxc3515dc9abca6 k8sPodName=openstack/keystone-api-f99ddcb5-ftfx2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a8b44851e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3297 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-api-f99ddcb5-ftfx2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a8b44851e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3297 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-api-f99ddcb5-ftfx2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a8b44851e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3297 identity=34955 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-api-f99ddcb5-ftfx2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a8b44851e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3297 identity=34955 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-api-f99ddcb5-ftfx2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.222 465175b0-d20a-441d-b6f0-9ebca6b01952 default }" containerID=03753467f895c5700d3bcc4cfa9c71b08d596697d3bf62dac9292f116c1603ab datapathConfiguration="&{false false false false false }" interface=lxc51d24c6a20a9 k8sPodName=openstack/keystone-credential-setup-4dhmq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03753467f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2125 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-credential-setup-4dhmq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03753467f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2125 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7ddf4e4b-3e87-4e25-9be6-0d9c140d73bf,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=7ddf4e4b-3e87-4e25-9be6-0d9c140d73bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-credential-setup-4dhmq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7ddf4e4b-3e87-4e25-9be6-0d9c140d73bf;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=7ddf4e4b-3e87-4e25-9be6-0d9c140d73bf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03753467f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2125 identity=42257 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7ddf4e4b-3e87-4e25-9be6-0d9c140d73bf,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=7ddf4e4b-3e87-4e25-9be6-0d9c140d73bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-credential-setup-4dhmq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03753467f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2125 identity=42257 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-credential-setup-4dhmq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a8b44851e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3297 identity=34955 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-api-f99ddcb5-ftfx2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a8b44851e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3297 identity=34955 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-api-f99ddcb5-ftfx2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=03753467f8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2125 identity=42257 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-credential-setup-4dhmq subsys=endpoint level=info msg="Successful endpoint creation" containerID=03753467f8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2125 identity=42257 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-credential-setup-4dhmq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=03753467f8 endpointID=2125 k8sNamespace=openstack k8sPodName=keystone-credential-setup-4dhmq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7ddf4e4b-3e87-4e25-9be6-0d9c140d73bf k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=7ddf4e4b-3e87-4e25-9be6-0d9c140d73bf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=03753467f8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2125 identity=42257 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-credential-setup-4dhmq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 5e8c01f9-6174-438b-ae71-03383e6d4603 default }" containerID=e0dfcd1cde8992fd65c3f38690c47efffc89dbef435911e1745e668aedd1ca6d datapathConfiguration="&{false false false false false }" interface=lxcd7fc339c469b k8sPodName=openstack/keystone-db-init-hnv7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0dfcd1cde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-init-hnv7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0dfcd1cde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dae94bc7-4c20-4fa7-9ce3-4aecc698cc19,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=dae94bc7-4c20-4fa7-9ce3-4aecc698cc19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-init-hnv7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dae94bc7-4c20-4fa7-9ce3-4aecc698cc19;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=dae94bc7-4c20-4fa7-9ce3-4aecc698cc19;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0dfcd1cde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 identity=2911 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dae94bc7-4c20-4fa7-9ce3-4aecc698cc19,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=dae94bc7-4c20-4fa7-9ce3-4aecc698cc19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-init-hnv7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0dfcd1cde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 identity=2911 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-init-hnv7f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e0dfcd1cde datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3773 identity=2911 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-init-hnv7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0dfcd1cde datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3773 identity=2911 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-init-hnv7f subsys=daemon level=info msg="Delete endpoint request" containerID=e0dfcd1cde endpointID=3773 k8sNamespace=openstack k8sPodName=keystone-db-init-hnv7f subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dae94bc7-4c20-4fa7-9ce3-4aecc698cc19 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=dae94bc7-4c20-4fa7-9ce3-4aecc698cc19 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e0dfcd1cde datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3773 identity=2911 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-init-hnv7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 133fbe3e-e53e-40da-9dda-dbbf914d27d5 default }" containerID=55d00f18ba22e221d74d74d2cf2ae35e0925f40501e63d6fe5c2a34e72344737 datapathConfiguration="&{false false false false false }" interface=lxc24214a97d7c9 k8sPodName=openstack/keystone-fernet-setup-mxxxv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55d00f18ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3012 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-fernet-setup-mxxxv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55d00f18ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3012 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=011cd91f-4c38-4ecc-bc0c-5d70fd49216b,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=011cd91f-4c38-4ecc-bc0c-5d70fd49216b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-fernet-setup-mxxxv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=011cd91f-4c38-4ecc-bc0c-5d70fd49216b;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=011cd91f-4c38-4ecc-bc0c-5d70fd49216b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=55d00f18ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3012 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-fernet-setup-mxxxv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=55d00f18ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3012 identity=26088 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=011cd91f-4c38-4ecc-bc0c-5d70fd49216b,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=011cd91f-4c38-4ecc-bc0c-5d70fd49216b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-fernet-setup-mxxxv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55d00f18ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3012 identity=26088 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-fernet-setup-mxxxv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55d00f18ba datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3012 identity=26088 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-fernet-setup-mxxxv subsys=endpoint level=info msg="Successful endpoint creation" containerID=55d00f18ba datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3012 identity=26088 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-fernet-setup-mxxxv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=55d00f18ba endpointID=3012 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-mxxxv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=011cd91f-4c38-4ecc-bc0c-5d70fd49216b k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=011cd91f-4c38-4ecc-bc0c-5d70fd49216b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=55d00f18ba datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3012 identity=26088 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-fernet-setup-mxxxv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 2066348e-aebb-443c-990b-5468cf1596b3 default }" containerID=8e7056c762a93fa88abf192e1996e9a78a1720325441bf64d48f83d410d89324 datapathConfiguration="&{false false false false false }" interface=lxc082fff9e5a06 k8sPodName=openstack/keystone-db-sync-hzgwz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e7056c762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-db-sync-hzgwz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e7056c762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ffb838b2-b861-4608-8c30-714096785fd2,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=ffb838b2-b861-4608-8c30-714096785fd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-db-sync-hzgwz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ffb838b2-b861-4608-8c30-714096785fd2;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=ffb838b2-b861-4608-8c30-714096785fd2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e7056c762 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identity=4906 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ffb838b2-b861-4608-8c30-714096785fd2,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=ffb838b2-b861-4608-8c30-714096785fd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-db-sync-hzgwz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8e7056c762 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=938 identity=4906 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-db-sync-hzgwz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e7056c762 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=938 identity=4906 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-db-sync-hzgwz subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e7056c762 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=938 identity=4906 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-db-sync-hzgwz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e7056c762 endpointID=938 k8sNamespace=openstack k8sPodName=keystone-db-sync-hzgwz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ffb838b2-b861-4608-8c30-714096785fd2 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=ffb838b2-b861-4608-8c30-714096785fd2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8e7056c762 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=938 identity=4906 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-db-sync-hzgwz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 f82ad194-8d9f-4a4f-b3f0-8d38d7fc15c3 default }" containerID=4dbf0c3044d0b382836641eeef9a3a41549234f4cade1d8a652a2d9baa150e4e datapathConfiguration="&{false false false false false }" interface=lxc91785b6f32e2 k8sPodName=openstack/keystone-rabbit-init-tg7kw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dbf0c3044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-rabbit-init-tg7kw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dbf0c3044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2cc73c07-dacf-4623-b7ea-6fe6fa336674,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2cc73c07-dacf-4623-b7ea-6fe6fa336674,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-rabbit-init-tg7kw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4dbf0c3044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-rabbit-init-tg7kw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2cc73c07-dacf-4623-b7ea-6fe6fa336674;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2cc73c07-dacf-4623-b7ea-6fe6fa336674;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4dbf0c3044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 identity=2968 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2cc73c07-dacf-4623-b7ea-6fe6fa336674,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2cc73c07-dacf-4623-b7ea-6fe6fa336674,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-rabbit-init-tg7kw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4dbf0c3044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 identity=2968 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-rabbit-init-tg7kw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4dbf0c3044 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2535 identity=2968 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-rabbit-init-tg7kw subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dbf0c3044 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2535 identity=2968 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-rabbit-init-tg7kw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4dbf0c3044 endpointID=2535 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-tg7kw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2cc73c07-dacf-4623-b7ea-6fe6fa336674 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2cc73c07-dacf-4623-b7ea-6fe6fa336674 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4dbf0c3044 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2535 identity=2968 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-rabbit-init-tg7kw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 b961a30b-9417-4ffb-8792-bb4f67f069ac default }" containerID=e02be39c77658c1980cd23f75dfede012378cb6d7325888c44367358b5aa8a80 datapathConfiguration="&{false false false false false }" interface=lxc773812a9208e k8sPodName=openstack/keystone-domain-manage-lgjf9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e02be39c77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1327 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-lgjf9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e02be39c77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1327 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ee900943-00da-4585-a2af-baeaa22cfe09,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ee900943-00da-4585-a2af-baeaa22cfe09,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-lgjf9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e02be39c77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1327 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-lgjf9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ee900943-00da-4585-a2af-baeaa22cfe09;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=ee900943-00da-4585-a2af-baeaa22cfe09;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e02be39c77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1327 identity=5933 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ee900943-00da-4585-a2af-baeaa22cfe09,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ee900943-00da-4585-a2af-baeaa22cfe09,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-lgjf9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e02be39c77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1327 identity=5933 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-lgjf9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e02be39c77 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1327 identity=5933 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-lgjf9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e02be39c77 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1327 identity=5933 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-lgjf9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e02be39c77 endpointID=1327 k8sNamespace=openstack k8sPodName=keystone-domain-manage-lgjf9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ee900943-00da-4585-a2af-baeaa22cfe09 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=ee900943-00da-4585-a2af-baeaa22cfe09 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e02be39c77 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1327 identity=5933 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-lgjf9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 7b37db1a-4b5d-4774-9f19-1d60d37ffe5c default }" containerID=ebf0bd767366fba125b40f18a5dea7d602d2a0c88ccb2853288731b2681a3535 datapathConfiguration="&{false false false false false }" interface=lxc7c10cd212ec2 k8sPodName=openstack/keystone-bootstrap-zvfkn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebf0bd7673 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2253 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-bootstrap-zvfkn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebf0bd7673 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2253 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bdb544ef-66f0-4333-b787-05c151c2247d,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=bdb544ef-66f0-4333-b787-05c151c2247d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-bootstrap-zvfkn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bdb544ef-66f0-4333-b787-05c151c2247d;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=bdb544ef-66f0-4333-b787-05c151c2247d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ebf0bd7673 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2253 identity=1863 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bdb544ef-66f0-4333-b787-05c151c2247d,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=bdb544ef-66f0-4333-b787-05c151c2247d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-bootstrap-zvfkn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebf0bd7673 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2253 identity=1863 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-bootstrap-zvfkn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ebf0bd7673 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2253 identity=1863 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-bootstrap-zvfkn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebf0bd7673 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2253 identity=1863 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-bootstrap-zvfkn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ebf0bd7673 endpointID=2253 k8sNamespace=openstack k8sPodName=keystone-bootstrap-zvfkn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bdb544ef-66f0-4333-b787-05c151c2247d k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=bdb544ef-66f0-4333-b787-05c151c2247d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ebf0bd7673 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2253 identity=1863 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-bootstrap-zvfkn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 c99d5948-ba79-42e6-9b20-d1372fab41ca default }" containerID=4e3e558e5087097868c935bf1ac29ee29b42cab0dc940dde0049332af30b3a0b datapathConfiguration="&{false false false false false }" interface=lxca4f71047aefa k8sPodName=openstack/horizon-7588644dc6-b9gqs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e3e558e50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/horizon-7588644dc6-b9gqs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e3e558e50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/horizon-7588644dc6-b9gqs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e3e558e50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 identity=6282 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/horizon-7588644dc6-b9gqs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e3e558e50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 identity=6282 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/horizon-7588644dc6-b9gqs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4e3e558e50 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1993 identity=6282 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/horizon-7588644dc6-b9gqs subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e3e558e50 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1993 identity=6282 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/horizon-7588644dc6-b9gqs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.132 de72e518-13ae-42d3-9a2a-6f533cab3595 default }" containerID=f42823d3f51169a346db48993e4c4b0d8bc6ba3da76c10f0fb4c9c6320bb3cee datapathConfiguration="&{false false false false false }" interface=lxc4108a602828b k8sPodName=openstack/horizon-7588644dc6-szlkr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f42823d3f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3974 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/horizon-7588644dc6-szlkr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f42823d3f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3974 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/horizon-7588644dc6-szlkr subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f42823d3f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3974 identity=6282 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/horizon-7588644dc6-szlkr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f42823d3f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3974 identity=6282 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/horizon-7588644dc6-szlkr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 3b3b897b-a971-4859-8a81-1039c40ab781 default }" containerID=71d0e5a3b998cf6e0d33546142bbb96a0296b3a7edbdc3973f66f4edf6b9a403 datapathConfiguration="&{false false false false false }" interface=lxc4e6cada40b5e k8sPodName=openstack/horizon-7588644dc6-cxb6r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71d0e5a3b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/horizon-7588644dc6-cxb6r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71d0e5a3b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/horizon-7588644dc6-cxb6r subsys=endpoint level=info msg="Identity of endpoint changed" containerID=71d0e5a3b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 identity=6282 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/horizon-7588644dc6-cxb6r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71d0e5a3b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 identity=6282 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/horizon-7588644dc6-cxb6r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 1c2d9d44-aa50-4ea9-ad5b-2c8cc59e3949 default }" containerID=6da857d75e3b9d9ca8205aae001acd597fb0849f6422dfba17797952da8335d2 datapathConfiguration="&{false false false false false }" interface=lxcad189ec6e4c6 k8sPodName=openstack/horizon-db-init-tfztn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6da857d75e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/horizon-db-init-tfztn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6da857d75e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=581aad51-51df-4a6d-8c18-922e2502712f,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=581aad51-51df-4a6d-8c18-922e2502712f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/horizon-db-init-tfztn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=581aad51-51df-4a6d-8c18-922e2502712f;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=581aad51-51df-4a6d-8c18-922e2502712f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6da857d75e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identity=7784 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=581aad51-51df-4a6d-8c18-922e2502712f,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=581aad51-51df-4a6d-8c18-922e2502712f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/horizon-db-init-tfztn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6da857d75e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identity=7784 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/horizon-db-init-tfztn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=71d0e5a3b9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3796 identity=6282 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/horizon-7588644dc6-cxb6r subsys=endpoint level=info msg="Successful endpoint creation" containerID=71d0e5a3b9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3796 identity=6282 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/horizon-7588644dc6-cxb6r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f42823d3f5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3974 identity=6282 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/horizon-7588644dc6-szlkr subsys=endpoint level=info msg="Successful endpoint creation" containerID=f42823d3f5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3974 identity=6282 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/horizon-7588644dc6-szlkr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6da857d75e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=807 identity=7784 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/horizon-db-init-tfztn subsys=endpoint level=info msg="Successful endpoint creation" containerID=6da857d75e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=807 identity=7784 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/horizon-db-init-tfztn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6da857d75e endpointID=807 k8sNamespace=openstack k8sPodName=horizon-db-init-tfztn subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=581aad51-51df-4a6d-8c18-922e2502712f k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=581aad51-51df-4a6d-8c18-922e2502712f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=6da857d75e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=807 identity=7784 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/horizon-db-init-tfztn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 57702a84-539d-430f-baaa-10349c3aa128 default }" containerID=31f73e4d0a61e668b86821e3e1a8383c6ed010071954b2c5a859b577ea2a3e62 datapathConfiguration="&{false false false false false }" interface=lxcf9011bd31a3f k8sPodName=openstack/horizon-db-sync-h7lfd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31f73e4d0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/horizon-db-sync-h7lfd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31f73e4d0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=54b03337-3826-45f2-98a1-a290c6e1a5c4,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=54b03337-3826-45f2-98a1-a290c6e1a5c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/horizon-db-sync-h7lfd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=31f73e4d0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.30 ipv6= k8sPodName=openstack/horizon-db-sync-h7lfd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=54b03337-3826-45f2-98a1-a290c6e1a5c4;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=54b03337-3826-45f2-98a1-a290c6e1a5c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31f73e4d0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=37887 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=54b03337-3826-45f2-98a1-a290c6e1a5c4,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=54b03337-3826-45f2-98a1-a290c6e1a5c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/horizon-db-sync-h7lfd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31f73e4d0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=37887 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/horizon-db-sync-h7lfd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31f73e4d0a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=89 identity=37887 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/horizon-db-sync-h7lfd subsys=endpoint level=info msg="Successful endpoint creation" containerID=31f73e4d0a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=89 identity=37887 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/horizon-db-sync-h7lfd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=31f73e4d0a endpointID=89 k8sNamespace=openstack k8sPodName=horizon-db-sync-h7lfd subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=54b03337-3826-45f2-98a1-a290c6e1a5c4 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=54b03337-3826-45f2-98a1-a290c6e1a5c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=31f73e4d0a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=89 identity=37887 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/horizon-db-sync-h7lfd subsys=endpoint